21-S3-C2410A-032004 


USER'S MANUAL 


$3C2410A — 200MHz & 266MHz 


32-Bit RISC 
Microprocessor 


Revision 1.0 


ELECTRONICS 


S3C2410A 
200MHz & 266MHz 


32-BIT RISC 
MICROPROCESSOR 
USER'S MANUAL 


Revision 1.0 


ELECTRONICS 


Important Notice 


The information in this publication has been carefully 


checked and is believed to be entirely accurate at the 


time of publication. Samsung assumes no 
responsibility, however, for possible errors or 
omissions, or for any consequences resulting from 
the use of the information contained herein. 


Samsung reserves the right to make changes in its 
products or product specifications with the intent to 
improve function or design at any time and without 
notice and is not required to update this 
documentation to reflect such changes. 


This publication does not convey to a purchaser of 
semiconductor devices described herein any license 
under the patent rights of Samsung or others. 


Samsung makes no warranty, representation, or 
guarantee regarding the suitability of its products for 
any particular purpose, nor does Samsung assume 


any liability arising out of the application or use of any 


product or circuit and specifically disclaims any and 
all liability, including without limitation any 
consequential or incidental damages. 


"Typical" parameters can and do vary in different 
applications. All operating parameters, including 
"Typicals" must be validated for each customer 

application by the customer's technical experts. 


Samsung products are not designed, intended, or 
authorized for use as components in systems 
intended for surgical implant into the body, for other 
applications intended to support or sustain life, or for 
any other application in which the failure of the 
Samsung product could create a situation where 
personal injury or death may occur. 


Should the Buyer purchase or use a Samsung 
product for any such unintended or unauthorized 
application, the Buyer shall indemnify and hold 
Samsung and its officers, employees, subsidiaries, 
affiliates, and distributors harmless against all claims, 
costs, damages, expenses, and reasonable attorney 
fees arising out of, either directly or indirectly, any 
claim of personal injury or death that may be 
associated with such unintended or unauthorized use, 
even if such claim alleges that Samsung was 
negligent regarding the design or manufacture of said 
product. 


$3C2410A — 200MHz & 266MHz 32-Bit RISC Microprocessor 


User's Manual, Revision 1.0 (March 2004) 
Publication Number: 21-S3-C2410A-032004 


© 2004 Samsung Electronics 


All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted in any 
form or by any means, electric or mechanical, by photocopying, recording, or otherwise, without the prior written 


consent of Samsung Electronics. 


Samsung Electronics' microcontroller business has been awarded full ISO-9001 


certification (BSI Certificate No. FM24653). All semiconductor products are designed 
and manufactured in accordance with the highest quality standards and objectives. 


Samsung Electronics Co., Ltd. 

San #24 Nongseo-Ri, Giheung- Eup 
Yongin-City, Gyeonggi-Do, Korea 
C.P.O. Box #37, Suwon 449-900 

TEL: (82)-(031)-209-1934 

FAX: (82)-(031)-209-1899 

Home Page: http:/Awww.samsung.com 


Printed in the Republic of Korea 


Table of Contents 


Chapter 1 Product Overview 


Introduction 


SEE GAS OE RE EUS aN LN A CC a eg RS EN a EA a he 1-1 
FOALUNOS sinc sa pretest fe: nea dbacecess sd sues Sanacte tua petauaadbadecads id cess bnaebiedua Sei ges baceeeas sates. uaeebedag habaeia deameeet tare iaaeees 1-2 
BlOCK: Diagram csiicst costectsccteretsccgendtncueddastcostiasncateraan ced deaincueeiast utebeadnaaSsneds cea end incueddast cad bpastausensisuesdeaandedes 1-5 
PIPASSIQNMEMIS sactenscibedececlsrsabaned caching renene ned scenday re benehgad band redienacces laymen aatiey roeerentidan day eene geet 1-6 

Signal Descriptions: tive cece evs deere eel ade ae ete tiadace rea ceead aceon tn dineaeece acento 1-20 
S3C2410A Special REGiStersS............ccecccceeeececeeeee cece eect cece ee eeeeaeae anes ccaaeeeeaaaa esse aaaaeeeeaaaaeeeeaeaaeeeeaaaaees 1-26 

Chapter 2 Programmer's model 

OVOIVIOW fvc tec dieedieciniys Lig votes tee caves ieee daw diac aie unniveviceiniyy bee dave aceine Ly eee din eddie envied 2-1 
Processor Operating States f...cesc.a dele ccsvezetang hat sdasedieas nab adlecaseotec nd atee ses ivecdaal dle nsvatecangiancdeareieads 2-1 
SWItCHING State ve. c see sae ae ee OI ie ee ee Oe a ee ey 2-1 
Memory. Formats .e:3- 2... oun feeetiets teen beeen ideal deeeeecs ete beet token, Deira weet ee dale 2-1 
Big-Endiant Format: seicicssccesnec cote ecireeecngsleedeieciee ened eee eso iaeedegedeeds ivieesdnedi ieee diveeeegcoivevesdivvededieeee. 2-2 
Little -Endlein, ROMINA asec: ssesares neteeaces cea ees foes se cuiaees ne nys Sets codec cates one pete peace eset besa puewente ness 2-2 
Instruction: Lengths. ceeds. eeedevia dens fie do avant. barrens ene ie dosevendel. arenes reledeaevendel eel 2-2 
Operating: ModeSis:eve:cstesthe titeter ease eden deat eesti alee fawn ieee ne ethene 2-3 
FROGISIONS sic cecicuctageiense es aces agiete cogent encdegvldene Janets tiie aivnelagebinae eines aeanedigeiiede ined 2-3 
The Program Status ReQiSters .............::cccececneeeeeeaeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaaeaeeeeaaaaeeeeaaaeeeeeaaaeeeeaaeeeeees 2-7 
EXCO PIONS: .gevenesviveesee gece seed ade dene ayee Gl ued ag de ne el eae ee 2-10 
Interrupt: Latencles'.sce.cuiestn asec enact it idatea he cthes eloma bs vendo ibatn dadene da idhinen te tibetndtcces 2-15 
ROS se cievce seven cdagelevsevuensceed aveb ious ncdaged deca ediencdag Hivdb de eeuncadgddivde i dirncdeed ide avinciaeetieie ne viencaee ave, 2-15 


$3C2410A MICROPROCESSOR 


Table of Contents (Continued) 


Chapter 3 ARM Instruction set 


INSTRUCTION SCL: SUMMAY scot ke cater eee ore recall ea ae 3-1 
FOMMAal SUMIMANYs sescessvenve oi leas cin esuadcbiiaes Lieve stad vau tin veuedeaDiinvackisiavesdbleaessitaabehe adie laetaensnleneecnty 3-1 
IMSTFUCTIONSUMIMALY sssechsccts cecaettseveddc et veg toe sneupendiave de sincueedcutete poe egeMnede veanedineendbast veg soeaneeseneaategonsaue 3-2 

The: Condition Fields: scent ege cbc casieh boeken thick poate beca decade vbeeddan eae pat bbegsna din anim bed aa bie gets eseadee caves vos 3-4 

Branch. and, Exchange (BX) scci.c cine cents tacit ceeen ea dachees satan eadane ron ceenanientachbaeGhen saadica rohaaeiaibeteehoon ds 3-5 
INStructioni Cycles TMS sce ccuteet cia tuee Redteesciaasa ceccudeel acadaduan sk adten.cauaawucckudeat <ladvansfudteu.caadaa cucauieabenaaa 3-5 
ASSOMBIGr- SY Max: csisscuseradtang sad sschochaganegeadenonderadecng sad anecepbadetnedadancahynads cng sad sachethadanagbadanendenadeeegsad sho 3-5 
Using: Rida" ah Operand:. :..h2c6 eh. etcteeypendteseencen dayeted eninede lees oes daedeandiaeasaehdeidinad hav eidivinncin aeons 3-5 

Branch:and: Branch: with Link:(By°B) scsi. a acesieesecewstetade ete rie nice agents cee ssee aceiteheend Alas itangernandace aisle 3-7 
THOSINK: Bit cviceis fies akattvenes ncbest saprebcdeap chavs ad sain aeed edness caneeba duane gakesta cans neous sabia dean ausabiatvaeel attess shes 3-7 
INStruCtION: CYCIO TIMES seccces vez testeececteuteng bocstenetncte ued dastaeened ced tea noe eenenctaued sacdawencdoud ced boeatenoenebe ted dncays 3-7 
ASSEMBIEMSYMtAX eincscnchis Seeehohbh ua died eviee tenes Susie bheg san dbeed sea dten ects vee ahhh ga died edeeteeadas Gave thedee 3-8 

Data PrOCOSSING i ewsseceni host eaten elt a Caue oan Tat eade ein ctu aden hen cette eadeeeh, ela vaadane bon reetetadene ine ods 3-9 
CP SR Pla QS ctieiccsew.cvaacn cess pdteu sta pa teers vd dared agen qusandtey «and tnerosh sd sed. Sbnanaued ede ah stanetuensds gndadangaa quvducueh cass 3-11 
IAS cz fesszdent icasccd tetatecacncbaccd tad siencthatuccd#adangedycqhvecddadsnencgiadaced# adaneedsagheceg Aud abeeadbadaccd dadancedyeqleceyaateys 3-12 
Immediate Operand Rotates ............cccceececeeseeeeeeeeeeeeeeaaeeeeeeaaeeeeceaaeeeeseaaeeeeaeaaeeeseaaeeeeeeaaeeeeeeaaeeeeeeags 3-16 
Writing to FAS ceca ie econt ca dicate brie’ catacieiere echo adacieiieee bene cada vunes ceva danieleretrn adenine ntact ke 3-16 
Using-Ri1:5:aS: an @perandy i. 2sac oss echediasciaetsassacecsia sane caavabeccsseiavecdaeia decd iacans taaacteteancberasdeieeeeiniasencaes 3-16 
TEQ,; TST,-CMP and: CMN Opcodes. scsi sctisssanccacastasdeginevectave cneaes Saas aadaseaagdiyennd asd qudd ie sseccenianeeeneciye 3-16 
Instruction: Cycle. TIMeOS xii. isvecececcgaetece ce dekh ce beaeden cecuet boeddand bec staat bt ecdduedon dasha bboeddand boc ad sence eduaedeccesanetoedel 3-16 
ASSOMBIGr: SY MtAX ivecc civ canned ous cctentaaGect nce et ei aacaet eas ent Pad ac eeneeetnin ance ius edt eh vaadacueaee et aactatoin ede 3-17 
EXEIMPIOS aeeiiin coisas cctaasnaccsuleas <caiatuanctudteu.ciaaan oteauleal ccauaduanst siden. cuuaswncckulbat anadaduanseudteu.cuaaan cucauivanetaag 3-17 

PSR Transfer (MRS) MSR): secicicts cezacdescccetetaegtataeehenteeg and sneeoetacanies bataneepenads ved dad saweoehetaueg batanweherateweg Andaty 3-18 
OPSFANd RESINICUONS red accc cs ehicweeiead chess pendnesinn sane caedidwede nade day ges dtedens danas seh duidiecdshas exidivaenn den aeeene 3-18 
Reserved ‘Bits. xe vives acievseatecelereteiak ate citars sales etadaditelamebalen ei da vesoonine cule uadacetletatek ate chars cates tadadetlnce ts 3-20 
EXGIMPIOS 45 sisi cts dine ces teeeveccil dacs che vise doen. Uaue tiada en sdid caw, cause enibavs he cdaeeeeid enn, cate badven tna hintvanealeen. cies 3-20 
INSTrUCTION: CY Cle TMCS secccts veztzsiseencdeuteng bacstencencte ved dasdaeunedced tes noe eeudenctaues tasdawencdaud ced bocstenns rebated dndage 3-20 
ASSEMbIY SVMAXS itscctinceiesthiecge dtadeoeaeh tcaien area then tas beed sen htes eaten vee aehe aa died eu ian tee dac aera thetes 3-21 
EXAMpPlesisecieuccecieetencs tus e tibet otis chon ieen Teatiet ace eens ctu adaaben cette ade, elt vradavg een Teeth eadene a eds 3-21 

Multiply and Multiply-Accumulate (MUL, MLA).............ccceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeeeesaaeeeeeaaaeeeeeaaeeeeesaaaeees 3-22 
CRSR FlagS easickicd spstaxecdesqivcc ststinedadsadiededntaneedycqivec ddadanencgiadaceat adanceasagheceg Aud sbeeadbadancd? dance decqleceyaatate 3-24 
Instructlon:Gycle: TIMeOSs sicccc08 ose daetoee edeesnnteed ce thabeeseaatebaeiet Sneceuntan taeda ada dteh ee et dtesnaie tea tatiests 3-24 
ASSOMBIGR SY MtAX wigeetcewacacciclves below cadacoeierecss ka daccieinte neha adaceenes cr eva daceieeeten adage tag tele 3-24 
EXEIMPIOS 4s casi ccsv iinss hasiacees Sluis casedaue. abi Ueueckaain ack Sten che va bacea i Savacki eda vad blonn chtankuhcbibans teeta enceaa ean aats 3-24 

Multiply Long and Multiply-Accumulate Long (MULL, MLAL)............. cc ceceeeeeeeeeeeeeeeeee eee eeeeaaeeeeeeaaaeeeeeaaenees 3-25 
Operaid ‘REStiiCtOMS eia2s he cetduhedien daeeys whee /Eagad bce euadeoedinnd ban dd pat is edna dacaseabduedegad bind ek io ensnadeaearn ions 3-26 
CPSRAFIAGS sxx. feckocirabeciiesaech nan deeneanhicerohaabeethaaAbeh coke saben adage cobabepeitwnsbeb edt cuts Gace nunekin beatebeevneds 3-26 
Instruction: Cycle TiMOS icc ccuresd cia ivan hudteu.ciaasa cecauleel cabaduan Aiden. cabsanaccdulees <gladvan udteu.caadan cucauieebenaan 3-26 
ASSOMBICr- SY MAX siedsscnsctadscey sed sachochadannepadenondenadenegsed saevoebaeatngdatancadynadd ced dad sachethadamagpadanonderadeaegsadate 3-27 
EXAMpPlOS se .ctstdvvetinesniane: sath ihiet id dete hres an chceebieas dathentuehtesmatee? oath nian fet deties ines ateeaneaty 3-27 


$3C2410A MICROPROCESSOR 


Table of Contents (Continued) 


Chapter 3 ARM Instruction set (Continued) 


single: Data Transfer(EDR;"STR) seid crete te tee aes ied A ee 3-28 
Offsets: And AUto-INGOxING sic. cisesvedes icine ti ataees ilvavsdipwcbaces pélgeseijadedees pleas tinwabedes dbase diadeeesi hives dinates 3-29 
Shifted Register OSC sicscccectiscveddaee voetseysaunenein vas desindueedaut vhegpednculesets vocasdindueddast seubpestausensia teadeeaneuees 3-29 
Bytes: and! Words a aiccteic ye ctiecchcaitie gs fends lndadincesee teed ieaibee gd etbtes mates Leet adbieg peedieniden can ttnehiadie 3-29 
USO:0f RID i catir nto wn crch nents cen ae ance ns patos Paadact oon eeend es aadtcb bonsai ma aadeaebaventiubaadhgieuye cnt auee 3-31 
EXAUMPIO a scpech stew danacacevanczes cade doened ade. db ngeweuuanc tel iad tueesk oitee, da daewenee tel ugha teh dee. danaewenenineunanatees 3-31 
Data: ADOMS::s.cccfetstccesuols cee sadanccostaineceaadanecaindyeceaadarecadtainnced atancatenghs ceeaudancccthaieecetadanenduiaiveceaadancedas 3-31 
INStrUCTION Cy Cle MIMOS v5.5.2 ies dehesy gendnesees cen dsprdetwnnencdebeey pesduedans teaden eewesenccebesy yeedwsinaden dt areeeesen deed 3-31 
ASSOMBIGISSY MAK seis se caccatucr eateak cata retiaitn ucla adnate ite Read cadaeenta usteae tadagattacn Malek A daeenaita whee tadadeetecn eat 3-32 
EX@Mples: ves ieiou. nnccteets nd sees thpacaeeaa eden ta saccedap cians aiaeceteete cess teateeeuaic ee. auaaebedeabciaess biateeeeead ies. aiaetees 3-33 

Halfword and Signed Data Transfer (LDRH/STRH/LDRSB/LDRSH) ..............ccceeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeeeeaneeees 3-34 
Offsets and AUtO-INCOXING ...........cecceece cece eect cece eee e ee cane tree cane e eee ccna eee e cana eee e cana tesa ccna tees ccna esse caaaeeeeaaaaees 3-35 
Halfword’ Load and Stores sseswsecees adic eonce tee eactce en tbe aad tctoeee tees endtcubekea dea eaadacubenstiiue actgeeteeciteaee 3-36 
WSO OT RTD sobs feces Th cee vines See os aig pe tearecd Heowsiada peenaaned Uetes cua betnaecdd dees db ne anaeed pit evens peteancl tes, chianmench nites «aa satees 3-37 
Data ADOMSs.ccctatstccssiciscestaisiccotiadvecedadanectenciver edadanecatiaiaeced atancastetaiscoedudanecathatuccedatancatecabvecedadaneedan 3-37 
Instruction: Cycle MMOS scctssessheeccte a eednicvecccad sg hacia vacecheek fede ceecead A ean Aceh edn eececed pee Adee 3-37 
ASSOMBIG MSY MAX s coiiei sh saceetaca eaten’ dadace tanita ueleee tad accents bateek a dae tenia tacees adage Raleak cad aaeinnta wales tadageinuen nee 3-38 
EXAMpPleS ess 05nd iseGeaci fa ces. tinecte tea besedas dbaduccdeia cass daaecuest pies ceae bhaceeeas aa tes tiaeebeteg acess dnameeeteia ces ieee 3-39 

Block Data Transfer (EDM,-STM) i:ciscesticstcostiesnecteraasceedestncueeiastanetestnacSsraasuegensinauedlastandbpastaugeneastesdsanneebes 3-40 
The Register Liste: cctt rivet tigid tied pec ceaabedeccsvesutnedigad ted teen ide dinaden davmadne digas led pee cenbadeccsvuinedaettg 3-40 
AGOrESSING: MODES is.ccey a sacs bonne teens nadia nonce ric ah end aceeutn aptce nad ane pon rhn ty end etm ech nadige botea haa eadageeebn cutee 3-41 
Address: AliQMMe nits sixes iteat 2g 2atench va vaedyauan cnc s steal ota ha iaene | sd sael. ca adanench ites ct guadeenehudtaeec sagen caesittabengiateen 3-41 
Use Of the Si Bitiscsscctesghtcczoed stecethassecebetateaderattecesadatweastbatauegtasstaubered sung eds tueestassaee neta neuderateuegssdanaedas 3-43 
Useof Ri5 as the Bases ceic siescet. eeeeteedsettint Getedendsnatenes¥awedhedsea dene si etaderdsaadenesy uxbdeesseadand Geeterds aides 3-43 
Inclusion of the Base in the Register List ..............ccceeceeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeaeeeeeeeaeeeeseeaeeeeseeeeeeeeenees 3-44 
Data ADOMS2. isos) isaatestts nctes tasecnetus Saiet ubbaceeedsad au. tuagemeda bet ayes ceeeeuaid seus auaaebede acters aateeeebad nee anaetees 3-44 
Instruction Cycle TMS .dsccctrcisceesiastccctasstecceechstccdaadaccad laud tecdesdnenaenuhascedsatnececiavisedb aston eatvicedsasnecdes 3-44 
Assembler: Syntaxcrcifictscssetttausied at peutee ngadec dy Senadheaveasdeesy aacce nia then dovenncttvgadeed drat ine vaadaneamadtedeedts 3-45 
EX@IMPIOS) 23h since sinker dad enbvenoounale ca cuahica cn ceee das eadiee ia eht ta laad leboeneeeteat vada oan ght ta ta ahactoanaeetc al vada iets gr ius 3-46 

single: Data: Swap: (SWPP) scccceit ices sutuanctiviev.cipesancdtnites agi adeans oiben. cipasseecd ites cngsudeencfilbesajaeeeaccd nites tasaieee 3-47 
Byt@S:and Word sts sccsssaisccg esd stensthatseotfatateaheradvecesedatenestadsuuededstuadenadt cog aed stueebbataweddptaneuderabtangaeeataeees 3-47 
WSO RED scivetiensed untae vditabarectuhess setdeed scatuat utters teatihe sy ce ttines tadane eaeetara natuneds iebdeesmeadead Gaeetart atte 3-48 
Data ADOMS vteciosaucast bace tutte anh dakace ives eteueadacceiyes bi nah dares meetin dace teak cane ea ea aga 3-48 
Instruction: Cycle Mes; :2se..sisecuetafcbeessdbadecedy ia cess dbaaceesa bese dhaceeees aa tes diagebedea ebeehsdaateeeteia ee aia 3-48 
ASSO MBIS F:SY MAX is ches cctscosantixecnddavicnee ns saeccencaseesdta acoustic yacheges dace Menods weaans inecndbavicods ne syeeneneaaeesdiadneoben 3-48 

Software: Interrupt (SWI )ireisccccseet bee toandhce sy beticedeaedencadaes beedsandbee d pees ecsuedancasavedsedsandlee gy seeasedsledas casa edvetsaadie 3-49 
Return fromthe: SUDEMNVISOM s.:h ens hact on eaeen Uenhvch ions aptan tad agi ood ehatheadagh owns ph aa aad igh oeeeetntbendeatioun cet aute 3-49 
COMMENT FIOM irises jaaicecuctavens ietvanctuiteu.chsaueeceduita otsia duane olden. diiauacccd pital ot; steer taitesschpaneeccd nite ag satees 3-49 
Instruction Cycle: TMS .ascccsuissccostciveccaedanecasichyeceasdanccadtaianced stancatgnghs ceeaudanccothaieecesadanendbsaiveceaadanesdas 3-49 
ASSOMBICK-SYNtaxicecict deco teec tans det oevpeedtvasecgand seatedee si nades dev teadeeduectandssateced inated ev eedtvasendendoetebesiatded 3-50 

Coprocessor Data Operations (CDP)............ccccecececeeeeee cane tees cee tees ca ae tees cana eeeeaaaaeeeeaaaaeeeeaaaaeeeeaaaaeeesaaaaees 3-51 
COprocessor INStrUCTIONS: i: .ite.sehadeepiiaveet hada ceed ilvuws cnn eebecen pi deecets ddacees ideas. cin euseceipivaee dh vdeene | ileay.cihgiaee 3-51 
Instruction. Cycle TiMeS vacccetnsticcosiaatecttuasteccgechseccdadtaccaelavieocdniaensenchaccedaainececiayieodd natecaddcbvacedsdundeses 3-52 
EXAMPIOS ecic fobs ceedsdenh treks isthe cednedsgetoncar athe tdebing pee iua ecient ied tnta ee daebsgelecceeethenaeet 3-52 


$3C2410A MICROPROCESSOR 


Table of Contents (Continued) 


Chapter 3 ARM Instruction set (Continued) 


Coprocessor Data Transfers (LDC, STC).........cieeceeeceeeceee ae eeeeee aa eeeeeeaa ee eeeeaaeeeeeeaaeeeeeeaaaeeeeeaaeeeeesaaeeeesaaanees 3-53 
The: Goprocessor Fleldssiics scees. sistete pied bseicend doe Hie eke el patna ceed boa bea be dba coe eat 3-54 
Addressing MOOS. tecstecsercestectestacuetiastonstanancnseniaategdeaincnneiashoneteninondinehasecead tacnwdlastandtansnenseneaateggnalee 3-54 
Address AllGnMent { ec.cie citi beh aaitie sy seviseescaiin sagen vbeediag Tact pat btedena dn epee aa dbie sd pe ieenseadee cages utes 3-54 
DatavAbOrts iivecnictacerue caches elie ieee eel dean eatin adanioan rect de nce le en dave cee acta ae 3-54 
ASSEMDIGR SV LAX: de. cs esce cock pct ek vig be faced udtewsdbntea cuekndtel ana be teaned dates ca bana ceed Nebel ang de teaned iM oeeadb nein ceedeuanaes 3-55 
EX@MpleS's:cretictsdectacsseesbactene toad ssues crateaes tag daeuneendeeeg and anwuostacanies hateneenecads ued Andaaweoetetaweg patanmeherateweg Andaby 3-55 
Coprocessor Register Transfers (MRC, MCR).............:ceccceeeeeeeaeeeeeeaeeeeeeeaaeeeeeaaeeeeeeaaeeeeeeaaeeeeeaaenees 3-56 
The: Coprocessor Fields... ciceesuee cd chant Soe vaca aadaceilets ea acteiarneg dace nd a ace ch elaceete 3-56 
Tralistersito Ra 5 saecy, aeita dees ecees, caneeh deans aes dneenueed ides cane tea ead natn ceed id oes abe aes ad ietvaeed Motes cats 3-57 
Transters from | RAS :eccteocactctscctensiaciwcdaed cotbanstondteade te ttaaiacabeia dd tactendhongereaaen tena incencdand codbaastendtrabanediad ise 3-57 
Instruction Cycle: TIMeOSis te: svuccecau eed aie ec coaetes Soeanh the seansboe ae peadte caddis con aatoeansbed a leah cogdten asin bthedee 3-57 
ASSEMBIGK:SY MAX wxcecthincncect ra, elton vended onrentnisaadeqe is ehten taadiciibeneediciv anche ove bt th vaadact renrentnaagtan ands 3-57 
EXEIMPIOS csi ven ch isee. ches swacctidt cuctalutuae tes bed. cag sanaeedudten caida hudba. cu asnaeckadt au ctauituancfsioed.cauaaaqaceudtas casa 3-57 
Undefined INStrUctiOn isccssscisceesccescaothesscmtbadancedscalace sAcdsnecorsedeuen taseseadecahscegaad shvecdbadaned dadanceayaglecey antes 3-58 
Instruction: Cycle: Times: ict isis afcecte sha izeceeaaicd a Nabe a dattesi hs desea access Wain anak Ma dee cetaanad ee hein ee 3-58 
ASSOMBIGR SY MtAX 3h eicest cadaccioluretloss cadacueinve econ uadaciieiees bin aadaco vues cue aadaneieretin adage ate adage ete ke 3-58 
Instruction Set: Examplese.ccicscasvehedceiiins fied ccid cas cat ve deciUavachi eda va cd blene dtaskedciiines dieiaencuaieeeeceds 3-59 
Using:the: Conditional: INStrUCtiONnS ::.5.:0sscets-avsecagacisvncdsdiscunsdesscnstac teen hace cecaadincund laadanes masawecgnuasteranadys 3-59 
Pseudo-Random Binary Sequence Generat0r............::cceeceeeeeeeee eee eeeeeeeeeeeeeeaeeeeeeeaeeeeseeeaeeeeeeeaeeeeenees 3-61 
Multiplication by Constant Using the Barrel Shifter...................cccecc cece ceeece ae eeeeeeeecaeeeeeeeesaeeeeseeeeseeeeaes 3-61 
Loading a Word from an Unknown Alignment ............0:::cecceeeeeeeeeeee cece eres seeeeeeeaaeeeeeeaaeeeeeeaaaeeeeeaaanees 3-63 
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Thumb Instruction Set Format :o.ccciece.ccevececeuest ceetevneeetenendeeetavvn eeteuspnecenavnirecueuedieceneenyecueughreeeeevhitevenuen tegen eve 4-1 
Format: SUMMAry sir. civieee isan tiene te saks ceciwies uaa mts Vepeett edameade ee. chigatin piveees ce awes tees chee at ci 4-2 
OpCOde. SUMMALY vs.ccctece ec ceenc deg eawceeeeven cage tevdedeveene deg Soawee dbewnccagestvoe ed dbene day deeweb eebenccugetevordedivecangeds 4-3 

Format 1: Move Shifted Register ..............cccscececeeseeeeceeeeeeeceeeeeeeeeaaeeeeseaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeseaaeeeeeaaeeeeeaags 4-5 
Operation: scedecidvieed eevecineeeed den eeeer nee epeeee vied eeped dae veees nag eugee dee bis ra eaeei ns peer renege ee ees eeepedien dey 4-5 
Instruction: Cycle. TIMe@s sics2..852-22. ests cteastceeedeen athe Bd eet coda eerie eects be esttenehceeedeeettates 4-6 
EEXGUMPIOS vive cece fetes becca eae tae hee et eu hg See ey Bag Se) De Las ee eee ag Sa ee a ed 4-6 

Format: 2 Adg/Subttactidicccs sede cet vee cectatvestecl ent veccunes nti deddocudhenesebesivcecundaont lvoe cccudeateal ees vencugesnnideedentts 4-7 
OPS Atom: socio sievew lied verne ies davies Pewee vee cease eee dec ies Wench age ede ce eevee ek pec ed Beane vende eevee nena diene 4-7 
Instruction: Cycle Nimes ss..scivern teeeteets eee recdeeee cll idea teleeeadls daamecbetes cUieim ta eeecdiweuimatee. nclhieeeacty 4-8 
EEXEIMPIOS vives sccvicte nee ees eee hee See lela de Dave Deine hee Sete de eve date Sle Ie dive dee awd dedi cae dee iw eels 4-8 

Format 3: Move/Compare/Add/Subtract Immediate .............:.cc:cecceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeeaeeeeeeeees 4-9 
Operations veecinseviseiene ciwieleeeges dteuebecvane vedi dee bebec i esuvend ie bees raueepee eee vies naauub edd ns eee adres eee eeeeee sien des 4-9 
Instruction. Cycle. Times s:.cccst32-25. dest ieerteeede es leet Bode col di eaaticeee deen coda ebhe bide otis eesti de aie tey 4-10 
EEXELIMIPIOS sees cee ves sig elvan 22a hale Sa eae ie og cane See he Sat ig Lag la eae ae a aol a es 4-10 

Format:4: ALU: Operations ic. vees 05 oe decteteecceal es venchunet nti deed eteuceeacaa ley, concbenesmalseedeacudbenteab ess denehunemaigeddctene 4-11 
Operation evccccedy ede igeci eerie Oe ie evaced ede dene evan Ge erie evade de wert es eel shaver eed enone debe ele 4-11 
Instruction: Cycle: Nimes 2s... isete ste derce its eecieees ieahn ciadehetn ihe ads eet idatn ha deren di ciety 4-12 
EEX@IM PICS: vsecee ccs ing Davee de Save sce atc cere cig lees De lene ee She De dive cae Glade doting dae ates decade iedag els 4-12 
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Format 5: Hi-Register Operations/Branch Exchange ...........:::::cecceeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeaaeeeeeeeeeeeseeaeeeeeenees 4-13 
@PSlatlOn ese ssia bee dettadgs sah Saiteade Se ieaaitede Givebbet sta iteed poaltba ites data edhel obabee dt see sneds danas dadumedbed aes 4-13 
Instruction: Cycle TMCS: cs sirens hicd cance eee al vadece a eitce baad ieboewee etn eendbed ote bt munud bag cuenta elemnee eet eehd 4-14 
THEE BX INSIHUCTION ssatecnesieten ct aiatuen sd ines cgazanencd atten <0 dedeen ch iued. chaganend advance aaiteened tied chaninendiavan cusetaed 4-14 
EX@MPpIOS. 2 icisccctacsrecdbectacetdaisiccothadveccd adanccdenciver edadanecataianced adancetungiyccedadancusthatveced adancasungivecedadanecads 4-15 
Using Ril 5:as:an Operand icishesciececdnecdec ainda stuteeddasitess eh sized ea auad gp edease ah aaaines eedeesnaiat gg Meta aed 4-15 

Format:-6:Pc-Relative: LOaGs.s.cca-svevirenk cahace ives eceueiahagcete einek adagieuwag ee cub adage ernak dane ney eta adage eee 4-16 
QPS ALON aie ss oan fia eck il cane cut sheden bitusted pudaeecind vans aihebcen Di tacaed jatedoed ildaesditwubedes iva ol adeead ileas canes 4-16 
Instruction Cycle WiMeS.s.2ccesiisccodiastcoctnsreccenaseccdsainccactauscneduinesdeagiveccesdinecedlavicod auieccenaseccdnadeccdas 4-17 
EX@MPpleS. : sfc ccc ci tsrdscoodeteetenen te etoien coneniaedscene arpa tneheed and needle tance eh le tuane heating neeaceaatedend oprnetaaany 4-17 

Format 7: Load/Store with Register Offset............0.::cccseeeeeeeeeeeee eee nese eeaeeeeeeeeeeeeeeeaeeeeeeeaaeeeeeeaeeeeeeeaeeeeeeeees 4-18 
CMSA OM eg: Gaee sites pee mece ulead cease dannct niueusdhsaumenesnital cea sa tuanet ai ben. di daseaces nital ata ie deanctaitawschnaneacesaitabens eed 4-19 
INStruction- Cycle TMCS asccsssisseccstctuecctadisecdeiaayeceaudanccadtaianced ataneqagnchs cegcedancccthaueecetadanenduiaivecesadanecdts 4-19 
EXAMPpPIOS: cco) erevtnetoenccnecesdueel cocede tes ceakewtns ne cba ey poetunnen coebdey peednetane tender peewbeance chee peedtwemacen tea eeueeenaded 4-19 

Format 8: Load/Store Sign-Extended Byte/Halfword. ...........:c:cececceeeeeeeeeeeeeeeeeeeeeeeeaeeeeeeaaeeeeeeeeeeeseeaeeeeenees 4-20 
CPSFALON sgecieiias ts sea cee aleve scanwabenes ts tah -04 faesenes ud vai ah eeseden du vaesetsataeees ilvads cit euseter bitaus el iadeaeed alvas. thes 4-20 
Instruction: Cycle TiMeS .scccstecinccasiautccctuasteccdechstcedsadaccad laut tecdosdnenaeouhascedsatnececiavicedbiastencd eabvkeddsadneceds 4-21 
EX@MPplOS:: sie cccve. ie tacectsteetie da ttalytondi ie caten les pk then eee tie oedies ag oten iaveehehs acted a cial hacen keh eae 4-21 

Format 9: Load/Store With Immediate Offset........0.....:cceeceeceeeeeeeeeeeeee eee eeeeeeeeeeeeeeeeeeeeeeaaeeeeeeaeeeeseeaeeeeeeeees 4-22 
OPS ALON seice 5 iii sices paemaeSpdtan ach saanancd ns cave csjammnced nites ota haduancd oiten. cbnassaeed uitaeesasiteensfiibessapneeeanchnites ay ;eees 4-23 
Instruction Cycle: TiMeOS visccsssissccoshcdicccdatanccecchvec cdadanenaeiaiancedadancastecgis ceeded anecethabaeced tanec decabvecedadanendds 4-23 
EX@IMPpPIOS: fei cecten bs henccstodevatbewbareccetay pedneceenteahin above ceeds pedines macend vache nett peed e meee peeeeeeencehe 4-23 

Format: 10: Load/Store. Haltword ssvcvivs-s cece sives eheuciadacceiyes ened adagiuwag ee cubadagelvea eeeak adage ey each ees 4-24 
CPS FAM saees Sine th bade Coes ile cea sheden itu od paeaeecind van abh eekcen Si bacaed jadedeed ildeesditwubedes bites ol iaieeadi leas canes 4-24 
Instruction Cycle Times i.2cc¢siisecetiestcactiasiecceraseccdnsinccactauscneduainendeagiveccesdinecedlaviccdbauieccenaneccdnadndcess 4-25 
EXAMPpPIOS:: ofea2d:teYercadeteeteeadas Siged iin grees nedacene cape btneiaed tan a reeale tance ipa haatin gy peeaceaaiedend plane ean 4-25 

Format 11: Sp-Relative Load/Store........... cc ceeeceeeseeeeeceeeeeeceaeeeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaeeeeeeeaeeeeeeaaeeesaeaaneeeaeags 4-26 
OPS Fallon aseccs Sissies pa sauees nites acs fa dan hui teuschsaumecednita obs iaduacst uiten,cihaueccct pital ot; iaduan Sad tasschnaneecedibaveaafetaes 4-26 
INStruction- Cycle TMCS vavecstcdssccostciveccandanecasichyeceasdanccadtaianced stancetgnghs ceaudanccothaieecesedanendbaabvecesadanecaas 4-27 
EXAIMPlOS sft: Mes Poscodicendersteeubaiectetesy peudesees tender esurene state tebdnetans teadey beau necceheeypendnvsmnacin tv eeneeanaene 4-27 

Format: 1.2::Load Address sacs.c.caucebe cet akaceeits etateadageoita eee aba cages ete daceleia ened Aachen attach 4-28 
CPS FALOM secession ds eh eck ildacs on eoeadsepitau ed iadaenes lve cnn eebeden pi vesaetsaiaeees il vads cih euseteiDivaues li atuaeetideas, eit! 4-28 
Instruction Cycle TiMeS .scccstncinccesiaatecttuasteccgechsbccdastaccdelaubeocdesdnenaenchaccednabnecuciaybsedd nvtecadecbvacedsalnecess 4-29 
EXA@IMPpPlS £2.22 oto. talsne sdendete phenhons stbadevycuentngesn tes peathesdteedee gy reediansnoten covered acted a oie banca eed rekthe baeen 4-29 

Format 13: Add Offset To Stack Pointer .............cccececeeeeeeeeeeeeeeeeeee nese ee ae tees eeeeeeeeeeaeeeeeeeaaeeeeeeaeeeeeeeaeeeeeenees 4-30 
CPS ALON gases  sescies passa eh tan cng pa euin okay oeviscdzmnnedndtak abe ieeaned oiued chaaasaces ita cna petsandtitivedsapnmeeaned nites a3 sceeed 4-30 
INStruction Cycle: TMCS asccsscissccothcsvcatdadanecdgcchvec cdadanenaeiaiancedadancatecgis ceeded snccathadaccedatancndecabvecetadanendts 4-30 
EX@IMPICS c.bectestwrcoccethdciadianiareatethy fetdnesscetent a poeta cette petdines asec tvieani en nett peednee meseut a oeeaeeaaehd 4-30 

Format>14:PUush/Pop REGISt6rs as-cvice- cadace nines oceeeiabagceiwan bi ced sadagieunta ee cubadageeduta eenak adage cunty eteeeadageeawen eee 4-31 
OPS FALOM wcoe. oiiaeeth sc vaute ssl van ates ueden bidush et ateesiid vans tih wekeceaiibaeeel atedoed ileas titwisedea bien dl aieeen ileas aad 4-31 
Instruction Cycle TiMeS ..cccesiisecotiestcoctinsaecceniastccdedbnccadtaunchedaadaendeagissceasdinecadlasiccdbiasaeccentiniecdnainentas 4-32 
EXAMPpPlOS fohc nd duerseedeiacieaeeacdgacten genase nedecene capa btneiaed ian ad reedlesancc alley pean heating neearenaiedend oye utnetanen 4-32 

Format 15: Multiple Load/Store 2.0.0... eececesseeeeeeeeeeeeceeaeeeeeeaeeeeeceaaeeeeeeaaeeeeeeaaeeeeeeaaeeeeeaaeeeeeeaaeeeeeaaneeeaeags 4-33 
CPS FALOM si. cess fe actos sas aec CEivead cs ha tuan chai teunchsaumened pital atau tuanet ai be. di iaseaccs niet cca hedeanctaitausahaaneaces barca fetaed 4-33 
Instruction. Cycle: TMS is cczscissecostcinecctadanecasicayecedadanecadtaunnced stanccdgnghb ceetedancccdhareecetatanendasaivecesads nena. 4-33 
EX@MPpPIOS): otter evtnecedeciedcesteehaieadetteveesdnereen cat saptetancenceeedey peinetanaaenl siaeeen ened etdey pebdnecane tent ureeeneeancete 4-33 
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Format: 16: Conditional Branchi,..cccesieves ke coee cece Ct te 4-34 
AOSV ALON. Si Se ciacns ne Sade O85 5a dines Saaz efhaa peas ba adic eos ba ces PG zoe iv aes neg dba die ead nd Snes Pa ietha ge Se age a 4-34 
INStruction: CYCle: THMOS vestets vccacttseveddc st vegtoeseeugendiaes de sincunedcuteie poe laeehscede vee oedincendbast veg seaneesenoaategsnéing 4-35 
EXAIMPIOS saritecdes Mkt Sendaadtiaudretstaitec ee pen hose otac cecae boetiautbee Met hie cdketee cesta ubneR ad toe ss yeatecedtatencesan ehheged 4-35 

Format 17: Software Interrupt..............:ccceceeseeeeceeeeeeeeeeaeeeeeeaaeeeseaa ee eeeeaaeeeeeeaaeeeeseaaeeeeeaaeeeeseaaeeeeeeaaeeeeaeags 4-36 
SGA. 5 scared Seseeis taatec headed vt phe ttieiaed va seed gna ciavaund tal sana dnerask gd gee dbbannctavae noha gbadten ed se oeeieduagan cueauetabade 4-36 
Instruction: Cycle: TMS escicks vezscdeseccetetanes tadaneehetateegandanweogtecevies hataneepecads ved And saweoghetaues patanweerateweg andabd 4-36 
EXGIMPICS catitetoieiiht quetaetd siti cecdau pede an esas tec douatebana oben davies bregsn thee cust haediaad ohessaan dense saat tutat aes 4-36 

Format 1:8: Unconditional Branch ssceince2se.k ate cesirs ccieveiatadeelatetees ence ierente cele eiadacelarebsiek ataere ales eiadadelaee es 4-37 
AOSV ALON. Sic case heeteh ovis sg detec este sen. axacabe abe sna cdbadnaieds aa cae dan autie de ads nega da adec eau sd sues auneate dane ness bnatnemudaa sans taag 4-37 
EXQIMpPlS'ssccectett cog beestoceecctseeesesieeensdauteud bacstenstncte ued dagiawunbdc eb tea poe be eedenctawes tne dawensdoud ced breeheenenete veg dading 4-37 

Format 19: Long Branch With Link.............ccceeeeeeeee cece eeeeeeee ee ee ee ee ae ee sees ae eeeeeeaaeeeeeeaaeeeeeeaaeeeeeeaeeeeseeaeeeeeenees 4-38 
OPS ALON. os sv tect a Reeih vane otn alte a ahhcn ponaeeieanuahtce a shte a ahica bene sebean wndaebeba dite taadane pobaeea nh enbaceeenueds 4-38 
Instruction: Cycle-TiMOS ss cect aces cetuee kev iee. can tancecdudtes aledaan Sudden. cgasnacckadtas cgaityenfebee.caamaacadudtal nans 4-39 
EXAMpleSizsccscsctsvornscasseneeabs veg acdetuacetatasesbatensedzenbtme cast snutostetenes hataneeoetnds veg And stweebtagaved betaswenerobenecantshd 4-39 

Instruction: Set Examples zc si.icic2 cis ices deac ahs ieeacsdiioe a Whoo ac dantese Madness ances Wain aauenh Ma ieesetaniad ees hatte 4-40 
Multiplication by a Constant Using Shifts and AddS 0.0.0... 00... ceceeeeeee ee eeeeeeeeeeeeeeaaeeeeeeaaeeeeeesaaeeeeeaaaeees 4-40 
General Purpose Signed Divide...............ccecececseeeececeeeeeee cence eeaaee eres aaae eres aaaaeeeeaaaaeeeeaaaaeeeeaaaaeeesaaaaees 4-41 
Division bya COnstantccisctivetezcisdenddc sted tecsaeudsnctateedicancenede th cng pacdaeedenctauen dz iaeencteud deg pecaneedeccgaueeantine 4-43 
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OVOIVIOW shi catcnnahccnbs hace ttre eld Aaveeiaalaentn Aine obabeed Maven nuels cain hana hotvedeell A daeeeGuademth ina tee A tai ly 5-1 

FUNCHON DOSCHIPLION i sieec.cssasvacccutt i ctaikiaee Aud bed. cag eancecdudt ak cia latuan Sedbed.cuessvaccaudtes clagidueniudged.cgaueacacdudtes als 5-3 
Bank® Bus: WIdthi.22-cssects:siecdssscsseusshousce dasuseuabsclanezsadsaecaraedeuentadsseadeaakscegaad shvucdbadenedadanceaeglecedaadays 5-3 
Memory (SROM/SDRAM) Address Pin Connections................ccceeeeeeceeeeeeeeeeeeeeeceeeeeeeaaeeeeeeaaeeeeeeanenees 5-3 
Sdram Bank Address Pin Connection. ............cccececeeeeeeeee ee eeeeeeaeeeeeeeaaeeeeeeaaeeeeeaaeeeeeeaaeeeeeaaeeeeeeaaanees 5-4 
Nwait:Pin Operation si.25 25s o sac. asivinadca te iaeceaaincocd ig canccaa vane cesssbavecasia cocina cues taaacteteancoarasdaaieculuiagenesahl 5-5 
Programmable Access Cycle’ s:ciscccdiceteecsetaneuhtncts teedngineunetcut ety pactaeehencde ves oad incendicss ved sieaneneonegatensneans 5-11 
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Bank Control Register (BANKCONN: NGCS6-NGCS7)..........ccccceeeeeeeeeeee cece eee eeaaeeeeeeaaeeeeeesaaeeeesaaanees 5-16 
RefreshControl REGISter s:csscccnstss teste tacustecatsepetadeed di fatwuostecanieg bataneepecads ved And saweoeteuaseg netanweheraceneg antag 5-17 


BankSize Reg iStehis2--snecacctes Maced siaadcte eveend oeauapnacdavated bayaade bess esd cesenndacessatiaeidinad ee devetdnvaeuaden teas 5-18 
SDRAM Mode Register Set Register (MRSR) 
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PRODUCT OVERVIEW 


INTRODUCTION 


This manual describes SAMSUNG's S3C2410A 16/32-bit RISC microprocessor. This product is designed to provide 
hand-held devices and general applications with cost-effective, low-power, and high-performance micro-controller 
solution in small die size. To reduce total system cost, the S3C2410A includes the following components separate 
16KB Instruction and 16KB Data Cache, MMU to handle virtual memory management, LCD Controller (STN & TFT), 
NAND Flash Boot Loader, System Manager (chip select logic and SDRAM Controller), 3-ch UART, 4-ch DMA, 4-ch 
Timers with PWM, I/O Ports, RTC, 8-ch 10-bit ADC and Touch Screen Interface, IIC-BUS Interface, IIS-BUS 
Interface, USB Host, USB Device, SD Host & Multi-Media Card Interface, 2-ch SPI and PLL for clock generation. 


The S3C2410A was developed using an ARM920T core, 0.18um CMOS standard cells and a memory complier. Its 
low-power, simple, elegant and fully static design is particularly suitable for cost- and power-sensitive applications. It 
adopts a new bus architecture called Advanced Microcontroller Bus Architecture (AMBA). 


The S3C2410A offers outstanding features with its CPU core, a 16/32-bit ARM920T RISC processor designed by 
Advanced RISC Machines, Ltd. The ARM920T implements MMU, AMBA BUS, and Harvard cache architecture with 
separate 16KB instruction and 16KB data caches, each with an 8-word line length. 


By providing a complete set of common system peripherals, the S3C2410A minimizes overall system costs and 
eliminates the need to configure additional components. The integrated on-chip functions that are described in this 
document include: 


e« 1.8V/2.0V int., 3.3V memory, 3.3V external I/O microprocessor with 16KB I-Cache/16KB D-Cache/MMU 
e External memory controller (SDRAM Control and Chip Select logic) 

e LCD controller (up to 4K color STN and 256K color TFT) with 1-ch LCD-dedicated DMA 
e« 4-ch DMAs with external request pins 

e 3-ch UART (IrDA1.0, 16-Byte Tx FIFO, and 16-Byte Rx FIFO) / 2-ch SPI 

e 1-ch multi-master IIC-BUS/1-ch IIS-BUS controller 

e¢ SD Host interface version 1.0 & Multi-Media Card Protocol version 2.11 compatible 

e 2-port USB Host /1- port USB Device (ver 1.1) 

e 4-ch PWM timers & 1-ch internal timer 

¢« Watch Dog Timer 

¢ 117-bit general purpose I/O ports / 24-ch external interrupt source 

e¢ Power control: Normal, Slow, Idle and Power-off mode 

e 8-ch 10-bit ADC and Touch screen interface 

e RTC with calendar function 

e On-chip clock generator with PLL 
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FEATURES 


Architecture 


e Integrated system for hand-held devices and 
general embedded applications 


¢ 16/32-Bit RISC architecture and powerful 
instruction set with ARM920T CPU core 


e Enhanced ARM architecture MMU to support 
WinCE, EPOC 32 and Linux 


e Instruction cache, data cache, write buffer and 
Physical address TAG RAM to reduce the effect of 
main memory bandwidth and latency on 
performance 


e ARM920T CPU core supports the ARM debug 
architecture. 


e Internal Advanced Microcontroller Bus Architecture 
(AMBA) (AMBA2.0, AHB/APB) 


System Manager 
e —Little/Big Endian support 


e Address space: 128M bytes for each bank (total 
1G bytes) 


¢ Supports programmable 8/16/32-bit data bus width 
for each bank 


e Fixed bank start address from bank 0 to bank 6 


e Programmable bank start address and bank size 
for bank 7 


e Eight memory banks: 
— Six memory banks for ROM, SRAM, and others. 
— Two memory banks for ROM/SRAM/ 
Synchronous DRAM 


e Fully Programmable access cycles for all memory 
banks 


e Supports external wait signals to expend the bus 
cycle 

e Supports self-refresh mode in SDRAM for power- 
down 


e Supports various types of ROM for booting 
(NOR/NAND Flash, EEPROM, and others) 
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NAND Flash Boot Loader 
e Supports booting from NAND flash memory 
¢ KB internal buffer for booting 


e Supports storage memory for NAND flash memory 
after booting 


Cache Memory 


e 64-way set-associative cache with I-Cache (16KB) 
and D-Cache (16KB) 


e 8words length per line with one valid bit and two 
dirty bits per line 


e Pseudo random or round robin replacement 
algorithm 


e Write-through or write-back cache operation to 
update the main memory 


e The write buffer can hold 16 words of data and four 
addresses. 


Clock & Power Manager 


¢ On-chip MPLL and UPLL: 
UPLL generates the clock to operate USB 
Host/Device. 
MPLL generates the clock to operate MCU at 
maximum 266MHz @ 2.0V. 


e Clock can be fed selectively to each function block 
by software. 


e Power mode: Normal, Slow, Idle, and Power-off 
mode 
Normal mode: Normal operating mode 
Slow mode: Low frequency clock without PLL 
Idle mode: The clock for only CPU is stopped. 
Power-off mode: The Core power including all 
peripherals is shut down. 


e« Woken up by EINT[15:0] or RTC alarm interrupt 
from Power-Off mode 
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FEATURES (Continued) 


Interrupt Controller 


e 55 Interrupt sources 
(One Watch dog timer, 5 timers, 9 UARTs, 24 
external interrupts, 4 DMA, 2 RTC, 2 ADC, 1 IIC, 2 
SPI, 1 SDI, 2 USB, 1 LCD, and 1 Battery Fault) 


e Level/Edge mode on external interrupt source 
e Programmable polarity of edge and level 


e Supports Fast Interrupt request (FIQ) for very 
urgent interrupt request 


Timer with Pulse Width Modulation (PWM) 


e 4-ch 16-bit Timer with PWM / 1-ch 16-bit internal 
timer with DMA-based or interrupt-based operation 


e Programmable duty cycle, frequency, and polarity 
e Dead-zone generation 


e Supports external clock sources 


RTC (Real Time Clock) 


e Full clock feature: second, minute, hour, date, 
day, month, and year 


* 32.768 KHz operation 
e Alarm interrupt 


e Time tick interrupt 


General Purpose Input/Output Ports 
e 24 external interrupt ports 


e multiplexed input/output ports 


UART 


e 3-channel UART with DMA-based or interrupt- 
based operation 


e Supports 5-bit, 6-bit, 7-bit, or 8-bit serial data 
transmit/receive (Tx/Rx) 


e Supports external clocks for the UART operation 
(UEXTCLKk) 


e Programmable baud rate 
e Supports IrDA 1.0 
e Loopback mode for testing 


e Each channel has internal 16-byte Tx FIFO and 
16-byte Rx FIFO. 
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DMA Controller 
e 4-ch DMA controller 


e Supports memory to memory, IO to memory, 
memory to IO, and IO to IO transfers 


e Burst transfer mode to enhance the transfer rate 


A/D Converter & Touch Screen Interface 
e 8-ch multiplexed ADC 
e Max. 500KSPS and 10-bit Resolution 


LCD Controller STN LCD Displays Feature 


e Supports 3 types of STN LCD panels: 4-bit dual 
scan, 4-bit single scan, 8-bit single scan display 
type 


e Supports monochrome mode, 4 gray levels, 16 
gray levels, 256 colors and 4096 colors for STN 
LCD 


e Supports multiple screen size 


e Typical actual screen size: 640x480, 320x240, 
160x160, and others 


e Maximum virtual screen size is 4 Mbytes. 


e Maximum virtual screen size in 256 color 
mode: 4096x1024, 2048x2048, 1024x4096, 
and others 


TFT(Thin Film Transistor) Color Displays Feature 


e Supports 1, 2, 4 or 8 bpp (bit-per-pixel) palette 
color displays for color TFT 


e Supports 16 bpp non-palette true-color displays 
for color TFT 


e Supports maximum 16M color TFT at 24 bpp 
mode 


e Supports multiple screen size 


e Typical actual screen size: 640x480, 320x240, 
160x160, and others 


e Maximum virtual screen size is 4Mbytes. 


e Maximum virtual screen size in 64K color mode: 
2048x1024, and others 
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FEATURES (Continued) 


Watchdog Timer 
e 16-bit Watchdog Timer 


e Interrupt request or system reset at time-out 


lIC-Bus Interface 
e = 1-ch Multi-Master IIC-Bus 


e Serial, 8-bit oriented and bi-directional data 
transfers can be made at up to 100 Kbit/s in 
Standard mode or up to 400 Kbit/s in Fast mode. 


lIS-Bus Interface 


e 1-ch IIS-bus for audio interface with DMA-based 
operation 


e Serial, 8-/16-bit per channel data transfers 
¢ 128 Bytes (64-Byte + 64-Byte) FIFO for Tx/Rx 
e Supports IIS format and MSB-justified data format 


USB Host 
e 2-port USB Host 
¢ Complies with OHCI Rev. 1.0 


« Compatible with USB Specification version 1.1 


USB Device 
¢ 1-port USB Device 
e 5 Endpoints for USB Device 


« Compatible with USB Specification version 1.1 
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SD Host Interface 


¢ Compatible with SD Memory Card Protocol 
version 1.0 


¢ Compatible with SDIO Card Protocol version 1.0 
e Bytes FIFO for Tx/Rx 
e DMA based or Interrupt based operation 


¢ Compatible with Multimedia Card Protocol version 
2.11 


SPI Interface 


¢ Compatible with 2-ch Serial Peripheral Interface 
Protocol version 2.11 


e 2x8 bits Shift register for Tx/Rx 


e DMA-based or interrupt-based operation 


Operating Voltage Range 

e Core: 1.8V for 200MHz (S3C2410A-20) 
2.0V for 266MHz (S3C2410A-26) 

e Memory & IO: 3.3V 


Operating Frequency 
e Up to 266MHz 


Package 
e 272-FBGA 
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BLOCK DIAGRAM 
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Figure 1-1. S3C2410A Block Diagram 
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BOTTOM VIEW 


Figure 1-2. S3C2410A Pin Assignments (272-FBGA) 
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Table 1-1. 272-Pin FBGA Pin Assignments — Pin Number Order 


pre [sce 
Co |nacso 


[aooRr7icpaz [66 [oataro.——~—~=«d;SrerouToereo 
[xoore ——~—~S* ie |vooMo ———SCSC*d;CrrouTo@ree 
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Table 1-1. 272-Pin FBGA Pin Assignments — Pin Number Order (Continued) 


oe 


nXBREQ/GPB6 EXTCLK nCTS0/GPHO 
VDDalive nRESET EINT6/GPF6 


TOUT3/GPB3 VLINE:HSYNC:CPV/GPC2 nRTSO/GPH1 


fvssiam «tks |vssop 
raxoacoreres | Ke [oovroigpos ‘| _M 
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Table 1-1. 272-Pin FBGA Pin Assignments — Pin Number Order (Continued) 


EINT23/nYPON/GPG15 | Ps | SPICLKO/GPE13 


=< 
=< 
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Table 1-2. 272-Pin FBGA Pin Assignments 


Default /O State /O State V/O State /O Type 
Function @BUS REQ @PWR-off @nRESET 


DATA22 DATA22 


DATA23 DATA23 


a/7/a/a 
MP] PM] PP 


DATA24 DATA24 
DATA25 DATA25 
DATA26 DATA26 


C 
B 
Cc 
D 
E 
Cc 
D 
D 
D 
E 
E 
E 
E 
G 
G 
G 
G 
G 
G 
G 
H 
H 
H 
H 
H 
H 


n 


3 
1 
2 
3 
5 
1 
2 
4 
1 
3 
2 
4 
1 
F3 
F5 
F2 
F1 
F4 
3 
4 
{ 
5 
2 
6 
7 
1 
4 
2 
3 
5 
6 
J1 
J3 


n 


esate || gece || lcaamcten! |ilcomect wn Qa 
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Table 1-2. 272-Pin FBGA Pin Assignments (Continued) 


Default /O State V/O State /O State /O Type 
Function @BUS REQ @PWER-off @nRESET 


[LeNoSTwGroD | GPoo 
[VoLKiLGD_HOLKIGRCT 


- 


LEND:STH/GPCO GPCO 


| Oo 
VCLK:LCD_HCLK/GPC1 
fvDDiam | VDDiarm | OP 
vssiam | vSSiarm | oP 
: 

a ae 


O 
O 


fe 


n 


om 
—_— 
= lo 


(L)/ 
(L)/ 
O(L)/ 
(L)/ 
(L)/ 


fvssopSSCS*dtCssr 


O 
O 


. 


NESSES ABS. 
en ee ee 
a aa ae 


VD1/GPC9 GPC9 
VD2/GPC10 GPC10 
VD3/GPC11 GPC11 
[vooiam | vobiam | Pp 
vesam | vesiam | Pp 
VD4/GPC12 GPC12 
VD5/GPC13 GPC13 
VD6/GPC14 GPC14 
VD7/GPC15 GPC15 
VD8/GPDO GPDO 
VD9/GPD1 GPD1 
VD10/GPD2 GPD2 
VD11/GPD3 GPD3 
VD12/GPD4 GPD4 
[vooam | own |p |p 
esiem | vesiem |e 
VD13/GPD5 GPD5 O(Ly/ 

VD14/GPD6 GPD6 O(L)/ 

VD15/GPD7 GPD7 O(L)/ 


Q}2}|2)R 2/2} 
cHl[reiIcir fe Pee 
=) [S/S |< ~<a ~<a a 
= n |e 
ane) ~lo 


Q}2/2/8 
ee ee ee 
LILICIC ele le leis 


BS 
= 
~,, 


/— 
/- 
/— 
/— 
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J4 
J2 
J6 
K3 
J7 
K2 
K4 
K1 
K5 
K6 
L6 
L3 
L1 
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L4 
M3 
L5 
M1 
M4 
M2 
Nt 

N3 
N2 
N4 
PI 
P3 
p2 
Rt 

M5 
1 

R2 
Ut 
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Table 1-2. 272-Pin FBGA Pin Assignments (Continued) 


ee Default 1/0 State VO Type 
Function @PWR-off @nRESET 
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P| 
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ee 
ot 
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as 

pe 
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pee 

po aS 

aa 

pass 

Ss 

ae 

ee 

oe 

a a 

a 

ao 

pe 

ae 


S3i 
d3o0 
$30 


[ok [om 
— — 
a (o) 


S3i 


T2 
R3 
R4 
U2 
T3 
U3 
T4 
P4 
N5 
U4 
R5 
T5 
P5 
N6 
US 
U6 
T6 
N7 
P7 
R7 
7 
U7 
M7 
N8& 
L7 
U8 
T8 
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Table 1-2. 272-Pin FBGA Pin Assignments (Continued) 
EINT12/LCD_PWREN/GPG4 


Default I/O State /O State /O Type 
Function @PWR.-off @nRESET 


U10 


R11 
) 


1 
U11 
1 


EINT11/nSS1/GPG3 


(o) 


L9 
U9 
T9 
N9 
1 
1 


fo) 


jon 
— 
- 10 


EINT21/nXPON/GPG13 
EINT22/YMON/GPG14 


T11 
M 
R12 
U12 


M10 DP1/PDPO 
N14 DN1/PDNO 


T12 
U13 


T13 


DNO 
NCO 
R/nB 
OM3 
OM2 
OM1 


P12 VSSOP VSSOP 


T14 


U16 AINO AINO 


p Mit 
| Rta 
| ure 
| Mio | 
i 
| mi 
| vis 
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Pte 
zal 
| NZ | 
| ute 
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Table 1-2. 272-Pin FBGA Pin Assignments (Continued) 


Function @BUS REQ @PWR.-off @nRESET 
pia [VDDLMPLL | voDL_MPLL 
wig [VSS_MPLL | VSSLMPLL 
cit [vopLup. SS ~*d vDLUPLL 


N15 VSSi_UPLL VSSi_UPLL 


= = = = = = = 
=a /oa;/a |] oa |] os] S|] 


x< 
a 
Oo 
> 
ie) 
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Table 1-2. 272-Pin FBGA Pin Assignments (Continued) 


Function @BUS REQ @PWR-off 
_/- 
_/- 
O(H) 


K13 


TXD2/nRTS1/GPH6 GPH6 O(H 
K12 | RXD2/nCTS1/GPH7 GPH7 _/- 
J17 | nBATT_FLT 
L 


O( 
O( 


Ce | ota 
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a 

wie Jonstourgraas —_arsrour | | oy 

is [pwReN——~+d;SPWREN | ow | OU 
yoo SSSSC*C | 

vss SCSC~i ssi | 
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et 
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im 
| 16 
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fee 
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i-Z 
i-Z 
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i-Z 
i-Z 
i-Z 
i-Z 
i-Z 
i-Z 
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Table 1-2. 272-Pin FBGA Pin Assignments (Continued) 


Default /O State /O State /O State /O Type 
Function @BUS REQ @PWR-off @nRESET 
nWE 
nOE 


B17 
D 


n 
(oe) 


n [ok [ok Q 
—_ (de) 
= lo o}o loa Ke) 


S 
S 
B14 ADDR0O/GPAO ADDRO 
A14 ADDR2 ADDR2 
R4 


> 
S) 
S) 
or 


> 
iw) 
is) 
me) 
oo 


A12 VSSMOP VSSMOP 
E11 VDDMOP VDDMOP 
D12 ADDR10 ADDR10 
E12 ADDR11 ADDR11 
ADDR12 ADDR12 
ADDR13 ADDR13 
ADDR14 ADDR14 
G11 ADDR15 ADDR15 
A10 ADDR16/GPA1 ADDR16 
B10 ADDR17/GPA2 ADDR17 


Pr rl} >|> 
Oy;U;}O;O;G 
O0;U;}O;O;/O 
D)D}|D|n|v 
OlDADINID!A 


n 


D114 
F114 
B11 
Alt 
C11 


87 
AN 
| B16 
| c15 
Ate | 
| B18 
cia 
| tS | 
Fiz 
Bt 
ota 
| Ata 
| c13 | 
| 81s 
| bts 
Ata | 
| cre 
B12 
| ate 
Ata 
en 
_ p12 
eta 
pont 
aim 
Bt 
LAN 
| ct 
| att 
| Ato | 
| B10 | 
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Table 1-2. 272-Pin FBGA Pin Assignments (Continued) 


eS V/0 State VO State VO Type 

Function | @BUS REQ | @PWR-off | @nRESET 
i-Z 
i-Z 
i-Z 
i-Z 
i-Z 
i-Z 
i-Z 
i-Z 


Qn 


[om 
Ss 
o|=ilo 


0 
> 
4 
> 
(=) 


vlvD/Ul/U|U 
S/S Sl Sls 
4/4/45] 5]/o 
ead be eal Real ess 
OD }o;]R]W| Pp 


[paras ————*d—CiTAD 
[pats *d Ci ATAO 
: 


Sane) 
>| > 
S/o 
>| > 
oOo | © 


AQ 
E9 
cg 
E8 
C8 
FQ 
G9 
B8 
A8 
D7 
E7 
C7 
B7 
A7 
C6 
A6 
F8 
F7 
A5 
C5 
B5 
D5 
A4 
B4 


A: 


ELECTRONICS 1-17 


PRODUCT OVERVIEW S3C2410A 


Table 1-2. 272-Pin FBGA Pin Assignments (Continued) 


Default /O State /O State /O State /O Type 
Function @BUS REQ @PWR-off @nRESET 


ce [von STC P| | to 
F6 VSSi VSSi S3i 
[rs |vss——SC~sCssi “| | TY 


NOTES: 

The @BUS REQ. shows the pin states at the external bus, which is used by the other bus master. 
"—‘ mark indicates the unchanged pin state at Bus Request mode. 

Hi-z or Pre means Hi-z or Previous state and it is determined by the setting of MISCCR register. 
Al/AO means analog input/analog output. 

P, |, and O mean power, input and output respectively. 

The I/O state @nRESET shows the pin status in the @nRESET duration below. 


Or ON 
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7. The table below shows I/O types and the descriptions. 


ae 
lp 
cipro 
plone 
onot 6) 


ath, bb 
n(phsose25) 


t6(phtbsu1 00ct6sm) Bi-directional pad, 5V tolerant LVCMOS schmitt-trigger, 100Kohm pull-up 
resistor with control, tri-state, lo = 6mA 


t8(phbsu1 00ct8sm) Bi-directional pad, LVCMOS schmitt-trigger, 100Kohm pull-up resistor with 
control, tri-state, lo = 8mA 


t12(phbsu1 00ct12sm) Bi-directional pad, LVCMOS schmitt-trigger, 100Kohm pull-up resistor with 
control, tri-state, lo = 12mA 


d8(phbsu100cd8sm) Bi-directional pad, LVCMOS schmitt-trigger, 100Kohm pull-up resistor with 
control, open-drain, lo = 8mA 
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SIGNAL DESCRIPTIONS 


Table 1-3. S3C2410A Signal Descriptions 


a 


Bus Controller 


OM [1:0] OM [1:0] sets S8C2410A in the TEST mode, which is used only at fabrication. Also, it 
determines the bus width of nGCSO. The pull-up/down resistor determines the logic 
level during the RESET cycle. 
00:Nand-boot 01:16-bit 10:32-bit 11:Test mode 


ADDR [26:0] [=6- :| ADDR [26:0] (Address Bus) outputs the memory address of the corresponding bank. 

DATA [81:0] DATA [31:0] (Data Bus) inputs data during memory read and outputs data during 
memory write. The bus width is programmable among 8/16/32-bit. 

nGCS§ [7:0] nGCS§ [7:0] (General Chip Select) are activated when the address of a memory is 
within the address region of each bank. The number of access cycles and the bank 
size can be programmed. 


InweE = sdf nWE (Write Enable) indicates that the current bus cycle is a write cycle. 
InoE— (st—‘z|tCO nOE (Output Enable) indicates that the current bus cycle is a read cycle. 


nXBREQ nXBREQ (Bus Hold Request) allows another bus master to request control of the local 
bus. Dek active indicates that bus control has been granted. 

nXBACK nXBACK (Bus Hold Acknowledge) indicates that the S3C2410A has surrendered 
control of ie local bus to another bus master. 


nWAIT nWAIT requests to prolong a current bus cycle. As long as nWAIT is L, the current 
bus cycle cannot be completed. 
If nWAIT signal isn't used in your system, nWAIT signal must be tied on pull-up 
resistor. 

SDRAM/SRAM 

nSRAS | o | SDRAM Row Address Strobe 

nSCAS | O | SDRAM Column Address Strobe 

nSCS [1:0] | © | SDRAM Chip Select 

DOM [3:0] | © | SDRAM Data Mask 

SCLK [1:0] | | SDRAM Clock 

SCKE | © | SDRAM Clock Enable 

nBE [3:0] | © | Upper Byte/Lower Byte Enable (In case of 16-bit SRAM) 

nWBE [3:0] | © |Write Byte Enable 


1-20 ELECTRONICS 


$3C2410A PRODUCT OVERVIEW 


Table 1-3. S3C2410A Signal Descriptions (Continued) 


cle =i (sti‘zLCOO CC Command Latch Enable 
ALE iC Address Latch Enable 
InFCE =| —O_ | NAND Flash Chip Enable 
InFRE ————s|_—(O_| NAND Flash Read Enable 
InFWE ———|_(O_| NAND Flash Write Enable 


NCON NAND Flash Configuration. 

If NAND Flash Controller isn't used, it has to be tied on pull-up resistor. 
R/nB NAND Flash Ready/Busy. 

If NAND Flash Controller isn't used, it has to be tied on pull-up resistor. 


LCD Control Unit 

VD [23:0] | © | STN/TFT/SEC TFT: LCD Data Bus 

LCD_PWREN | O__ | STN/TFT/SEC TFT: LCD panel power enable control signal 

VCLK | 0 | STN/TFT: LCD clock signal 

VFRAME | | STN: LCD Frame signal 

VLINE | © | STN: LCD line signal 
lvM is] STN: VM alternates the polarity of the row and column voltage 

VSYNC | © | TFT: Vertical synchronous signal 

HSYNC | o | TFT: Horizontal synchronous signal 

VDEN | © | TFT: Data enable signal 

LEND | 0 | TFT: Line End signal 
istv | SEC TFT: SEC (Samsung Electronics Company) TFT LCD panel control signal 
lcpv, | SEC TFT: SEC (Samsung Electronics Company) TFT LCD panel control signal 
LCD_HCLK | © | SEC TFT: SEC (Samsung Electronics Company) TFT LCD panel control signal 
‘TP ti<‘idL;COSC SEC TFT: SEC (Samsung Electronics Company) TFT LCD panel control signal 
ISTH =| SEC TFT: SEC (Samsung Electronics Company) TFT LCD panel control signal 
LCDVF [2:0] | O | SEC TFT: Timing control signal for specific TFT LCD (OE/REV/REVB) 


Interrupt Control Unit 


EINT [23:0] Po | External Interrupt request 


nXDREQ [1:0] | 1 | External DMA request 
nXDACK [1:0] | © | External DMA acknowledge 
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Table 1-3. S3C2410A Signal Descriptions (Continued) 


[Signal [VO ——~—~——~—~—~S~S~«S scriptions. —SSCS~S~S~*™ 
UART 

(RxD (20) |_| [UARTreceivesdatainput 
TxD (20) | | UARTtransmitsdata output 
incTs {1:0} |_| [UARTcleartosendinputsignal 
raRTS [1:0] | _O _|UART request to send outputsignal SSS 
FUEXTCLK |_| UARTolocksignal 
ADC 

lIC-Bus 

HICSDA | 10 ([ilCbusdata 
ficscL | 10 |Cbusclock 


I2SLRCK | oO | IIS-bus channel select clock 
I2SSDO lIS-bus serial data output 


DATA (-) from USB host. (15Kohm pull-down) 
DATA (+) from USB host. (15Kohm pull-down) 
USB Device 


PDNO DATA (-) for USB peripheral. (470Kohm pull-down) 
DATA (+) for USB peripheral. (1.5Kohm pull-up) 

SPIMISO [1:0] SPIMISO is the master data input line, when SPI is configured as a master. 

When SPI is configured as a slave, these pins reverse its role. 


SPIMOSI [1:0] SPIMOSI is the master data output line, when SPI is configured as a master. 
When SPI is configured as a slave, these pins reverse its role. 


| o | 

fessol_ | |S:bus serialdatainput 
| 10 | 
| oO | 


SPICLK [1:0] SPI clock 
nSS [1:0] SPI chip select (only for slave mode) 
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Table 1-3. S3C2410A Signal Descriptions (Continued) 


[signa vO [SSSCSCSCS~S~S avon SSSSSCS~*d 


SDDAT [8:0] | io | SD receive/transmit data 
SDCMD | io | SD receive response/ transmit command 
SDCLK | 0 | SD clock 


General Port 


GPn [116:0] | io | General input/output ports (some ports are output only) 


TIMMER/PWM 


TOUT [3:0] | | Timer Output [3:0] 
TCLK [1:0] ze External timer clock input 


JTAG TEST LOGIC 


nTRST nTRST (TAP Controller Reset) resets the TAP controller at start. 
If debugger is used, A 10K pull-up resistor has to be connected. 
If debugger (black ICE) is not used, nTRST pin must be issued by a low active pulse 
(Typically connected to nNRESET). 

in iow 


TMS (TAP Controller Mode Select) controls the sequence of the TAP controller's 
states. A 10K pull-up resistor has to be connected to TMS pin. 


TCK (TAP Controller Clock) provides the clock input for the JTAG logic. 
A 10K pull-up resistor must be connected to TCK pin. 


TDI TDI (TAP Controller Data Input) is the serial input for test instructions and data. 
A 10K pull-up resistor must be connected to TDI pin. 


‘To =——<“<i‘])™#COO SC TDO (TAP Controller Data Output) is the serial output for test instructions and data. 


Reset, Clock & Power 


nRESET ST | nRESET suspends any operation in progress and places S3C2410A into a known 
reset state. For a reset, NRESET must be held to L level for at least 4 FCLK after the 
processor power has been stabilized. 

nRSTOUT For external device reset control 
(nNRSTOUT = nRESET & nWDTRST & SW_RESET) 

PWREN 2.0V core power on-off control signal 


nBATT_FLT Probe for battery state (Does not wake up at power-off mode in case of low battery 
state). If it isn't used, it has to be High (3.3V). 


OM [3:2] OM [8:2] determines how the clock is made. 


OM [3:2] = 00b, Crystal is used for MPLL CLK source and UPLL CLK source. 
OM [3:2] = 01b, Crystal is used for MPLL CLK source 

and EXTCLK is used for UPLL CLK source. 

OM [8:2] = 10b, EXTCLK is used for MPLL CLK source 

and Crystal is used for UPLL CLK source. 

OM [3:2] = 11b, EXTCLK is used for MPLL CLK source and UPLL CLK source. 


A 
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Table 1-3. S3C2410A Signal Descriptions (Continued) 


[signa vO[SSSCSCS~S~«S spon SSSSS~*d 


Reset, Clock & Power (Continued) 


EXTCLK External clock source. 
When OM [3:2] = 11b, EXTCLK is used for MPLL CLK source and UPLL CLK source. 
When OM [3:2] = 10b, EXTCLK is used for MPLL CLK source only. 
When OM [3:2] = 01b, EXTCLK is used for UPLL CLK source only. 
If it isn't used, it has to be High (3.3V). 
XTIpll Al | Crystal Input for internal osc circuit. 
When OM [3:2] = 00b, XTIpll is used for MPLL CLK source and UPLL CLK source. 
When OM [3:2] = 01b, XTIpll is used for MPLL CLK source only. 
When OM [3:2] = 10b, XTIpll is used for UPLL CLK source only. 
If it isn't used, XTIpll has to be High (3.3V). 


XTOpll AO _ | Crystal Output for internal osc circuit. 
When OM [3:2] = 00b, XTIpll is used for MPLL CLK source and UPLL CLK source. 
When OM [3:2] = 01b, XTIpll is used for MPLL CLK source only. 
When OM [3:2] = 10b, XTIpll is used for UPLL CLK source only. 
If it isn't used, it has to be a floating pin. 


MPLLCAP Loop filter capacitor for main clock. 
UPLLCAP Loop filter capacitor for USB clock. 


Al | 32.768 kHz crystal input for RTC. If it isn't used, it has to be in High (RTCVDD = 1.8V). 


32.768 kHz crystal output for RTC. If it isn't used, it has to be Float. 


CLKOUT [1:0] Clock output signal. The CLKSEL of MISCCR register configures the clock output 
mode among the MPLL CLK, UPLL CLK, FCLK, HCLK and PCLK. 
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Table 1-3. S3C2410A Signal Descriptions (Continued) 


a || $3C2410A reset block and port status register Vpp (1.8V / 2.0V). 
It should be always supplied whether in normal mode or in power-off mode. 
|VDDI/VDDiarm =| P| S$3C2410A core logic Vpp (1.8V / 2.0V) for CPU. 
wsswssiam [P [socesoncowioneves 
oocNpuL | P_[SSGRNORNPL erate we OBIIVGG VIED 
vescwpcr [PF _[SSCRNORNPLC erase meOBIIVS 
fooor | F [sicerontOmenve@a 
yoowop FP S$3C2410A Memory /O Vpp 

3.3V: SCLK up to 133MHz 
senor [ |secesronwenaytOves 
jssor[P [Sicenontomenves 
Pe RTC Vpp (1.8 V, Not support 2.0 and 3.3V) 

This pin must be connected to power a if RTC isn't used) 
WeDLUPG [PF _|SRORHOA UPL sry anda Von 18/209 
PSSLUPL | P_[SRORCTOAUPCCsraee mda 


VDDA_ADG Le] $3C2410A ADC Vpp (3.3V) 
VSSA_ADC za S3C2410A ADC Veg 


NOTES: 

1. I/O means input/output. 

2. Al/AO means analog input/analog output. 
3. ST means schmitt-trigger. 

4. Pmeans power. 
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$3C2410A SPECIAL REGISTERS 


Table 1-4. S3C2410A Special Registers 


Register Address Address Read/ 
Name OS Endian) (L. Endian) Write 


[Memory Controller eee Controller 


a 
————— ROM Control 

[BANK1 Control = 

IBANK2 Control = es 
a Control 

BANK4 pera Sorte, 

— —— Control 

seus cent Control 

BANK7 Sa ee a 

DeAMSORAN Fetes Coe Refresh Control 


BANKSIZE 0x48000028 
MRSRB6 0x4800002C 
MRSRB7 0x48000030 


Foti Se See ej Bank Size 
Mode ese reise St SRA __ set for SDRAM 
Mode |Mode register setforSDRAM set for SDRAM 
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Table 1-4. S3C2410A Special Registers (Continued) 


Pmmen [eam [oem [oa [ex | 
(B. Endian) (L. Endian) Write 

WwW Control and Status Group 
Memory Pointer Group 

Frame Counter Group 
HcRhPortStatus2 

SROPND = |W 
PRIORITY 


A 
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Table 1-4. S3C2410A Special Registers (Continued) 
Register Address Address Read/ 
Name (B. Endian) (L. Endian) Write 


RIW 
a —— DMA 0 Current Source 
DMA 0 [DMA 0 Current Destination = Destination 


DMA 1 |DMA 1 Initial Destination Control | Destination Control 

[DMA 1 Control 

[OMA Count 

R/W 


DISRC3 0x4B0000C0 e WwW R/W DMA 3 Initial Source 
DISRCC3 0x4B0000C4 DMA 38 Initial Source Control 
DIDST3 0x4B0000C8 DMA 8 Initial Destination 


DMA 1 Initial Source 
DMA 1 Initial Source Control 
DMA 1 [DMA 1 Initial Destination = Destination 


DMASKTRIGO 0x4B000020 i = DMA 0 Mask Trigger 


DCDST3 0x4B0000DC 
DMASKTRIG3 0x4BO0000E0 
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Table 1-4. S3C2410A Special Registers (Continued) 


Register Address Address Read/ 
Name (B. Endian) (L. Endian) Write 


Clock & Power Management 


= Ww R/W__ | PLL Lock Time Counter 
Clock Generator Control 


Slow Clock Control 
LCD Controller 
w | aw 


NFCONF 0x4E000000 e W R/W NAND Flash Configuration 
NFCMD 0x4E000004 NAND Flash Command 
NFADDR 0x4E000008 NAND Flash Address 


Clock divider Control 


NFDATA 0x4E00000C NAND Flash Data 
NFSTAT 0x4E000010 | oR | NAND Flash Operation Status 
NAND Flash ECC 


NFECC 0x4E000014 


aifY 
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Table 1-4. S3C2410A Special Registers (Continued) 


Register Address Address Read/ 
Name << Endian) (L. Endian) Write 


PUART 


R/W a 0 Line Control 
TUARTOGonol OSS 
[UARTOModem Control = 0 Modem Control 


ee O Rx Error Status 
ae 0 FIFO Status 


[UARTO Modem Status 0 Modem Status 


UTXHO 0x50000023 | 0x50000020 | =w___|UART 0 Transmission Hold 
URXHO 0x50000027 | 0x50000024 | R__ |UART 0 Receive Buffer 
UBRDIVO 0x50000028 UART 0 Baud Rate Divisor 


— wa 
UART 1 Control 

UART 1 FIFO Control 

UART 1 Modem Control 


UART 1 Rx Error Status 

UART 1 FIFO Status 

UART 1 Modem Status 

a [uaRT Reseve Bute | 


ULCON2 0x50008000 or Ww R/W UART 2 Line Control 
UCON2 0x50008004 UART 2 Control 
UFCON2 0x50008008 UART 2 FIFO Control 


UART 2 Tx/Rx Status 
UART 2 FIFO Status 
a [an Rect Buter | 
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Table 1-4. S3C2410A Special Registers (Continued) 


rem [tex [ecm [om [ee | 
Name (B. Endian) (L. Endian) Write 

wR 
A [Timer Count Observation 0 
aw 
[A [Timer Count Observation 
aw 
A [Timer Count Observation 2 
aw 
A _[Tiner Count Obsewatons__—_—| 
[a [Timer Count Observation’ 
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S3C2410A 


Table 1-4. S3C2410A Special Registers (Continued) 


Register Name Address Address Read/ 
(B. Endian) (L. Endian) Write 


USB Device 


R/W_ | Function Address 


Power Management 


Interrupt Enable 


Interrupt Enable 


| oR Frame Number Lower Byte 
R/W__ | Register Index 


R/W_ | Endpoint 0 FIFO 
Endpoint 1 FIFO 
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Table 1-4. S3C2410A Special Registers (Continued) 


Register Name Address Address Read/W 
(B. Endian) (L. Endian) rite 
USB Device (Continued) 


EP2 DMA_CON 0x5200021B 0x52000218 R/W EP2 DMA Interface Control 
EP2 DMA_UNIT 0x5200021F 0x5200021C EP2 DMA Tx Unit Counter 


EP2_DMA FIFO 0x52000220 EP2 DMA Tx FIFO Counter 
EP2_DMA_TTC_L 0x52000224 EP2 DMA Total Tx Counter 
EP2_DMA_TTC_M 0x52000228 EP2 DMA Total Tx Counter 
EP2 DMA TTC _H 0x5200022C EP2 DMA Total Tx Counter 
EP3_DMA_CON 0x52000240 EP3 DMA Interface Control 
EP3_DMA_UNIT 0x52000244 EP3 DMA Tx Unit Counter 

EP3_DMA FIFO 0x52000248 EP3 DMA Tx FIFO Counter 
EP3_DMA_TTC_L 0x5200024C EP3 DMA Total Tx Counter 
EP3 DMA_TTC_M 0x52000250 EP3 DMA Total Tx Counter 
EP3_DMA_TTC_H 0x52000254 EP3 DMA Total Tx Counter 
EP4_DMA_CON 0x52000258 EP4 DMA Interface Control 
EP4_DMA_UNIT 0x5200025C EP4 DMA Tx Unit Counter 

EP4_DMA_FIFO 0x52000260 EP4 DMA Tx FIFO Counter 
EP4_DMA_TTC_L 0x52000264 EP4 DMA Total Tx Counter 
EP4_DMA_TTC_M 0x52000268 EP4 DMA Total Tx Counter 


EP4_DMA_TTC_H 0x5200026F | 0x5200026C EP4 DMA Total Tx Counter 


Watchdog Timer 


WTCON 0x53000000 R/W___ | Watchdog Timer Mode 


WTDAT 0x53000004 Watchdog Timer Data 
WTCNT 0x53000008 


Cc 
e Wo | RW [IIc Control 


RIW | IIS Control 
IS Prescaler 
IS FIFO Control 


Watchdog Timer Count 
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Table 1-4. S3C2410A Special Registers (Continued) 


Register Address Address Read/ 
Name — Endian) | (L. Endian) Write 


Ke) WOport 


pW 
————— A Data 
Pete Gongs B Control 
fae oa | a Control B 
—————EE C Control 
Pea C Data 
[Pull-up ContolC ss—s—iSY Eason. Control C 
fees D Control 
——————— D Data 

[Pull-up ControlD — ss—sisY 
pene es fPortE Control = ssts—s—sSY Control 
— E Data 
[PulkupContolE ssts—s—iCSY a Control E 
a F Control 
———— F Data 
[Pultup ConttolF ststs—s—sS@Y Feber Gomme Control F 
a G Control 
————E G Data 


[Pull-up ControlG sd ec Control G 
a H Control 


Featpae H Data 
|Pull-up ContolH—ss—s—isY —————— Control H 


[Miscellaneous Control = sd Control 

External aera erat Cone Reise _ Control Register 0 
External seal eet Gord eget __ Control Register 1 
External cual erp) Coral egw 2 Control Register 2 
—————— 
Ee 

External cena ernie Gone Reset 2 Filter Control Register 2 
External aera erent Fes Conrel Reise? Filter Control Register 3 
External eee mise Mask 


EINTPEND 0x560000A8 External ———————— Pending 
GSTATUSO | 0x560000AC 
GSTATUS1 | 0x560000B0 


fExternalPinStaus sd Pin Status 


[External PinStaus sd [External PinStaus sd Status 
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Table 1-4. S3C2410A Special Registers (Continued) 


if ee 
Name (B. Endian) (L. Endian) Write 

RIW | RTC Control 

Tick time count 

0x57000050 RTC Alarm Control 

ALMSEC 0x57000054 Alarm Second 

ALMMIN 0x57000058 
ALMHOUR 0x5700005C 
ALMDATE 0x57000060 
ALMMON 0x57000064 
ALMYEAR 0x57000068 
RTCRST 0x5700006C 
BCDSEC 0x57000070 
BCDMIN 0x57000074 
BCDHOUR 0x57000078 
BCDDATE 0x5700007C 
BCDDAY 0x57000080 
BCDMON 0x57000084 
BCDYEAR 0x57000088 


A/D converter 


ADCCON 0x58000000 e WwW R/W ADC Control 
ADCTSC 0x58000004 ADC Touch Screen Control 
ADCDLY 0x58000008 ADC Start or Interval Delay 


Alarm Minute 
Alarm Hour 
Alarm Day 
Alarm Month 
Alarm Year 
RTC Round Reset 
BCD Second 
BCD Minute 
BCD Hour 
BCD Day 
BCD Date 
BCD Month 
BCD Year 


ADCDATO 0x5800000C ADC Conversion Data 
ADCDAT1 0x58000010 ADC Conversion Data 


SPCONO,1 0x59000000,20 < W SPI Control 
SPSTAO,1 0x59000004,24 | =R  |SPIStatus 


SPPREO,1 0x5900000C,2C SPI Baud Rate Prescaler 
SPTDATO,1 0x59000010,30 
SPRDATO,1 0x59000014,34 


SPPINO,1 0x59000008,28 SPI Pin Control 


SPI Tx Data 
| =R | SPIRx Data 
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Table 1-4. S3C2410A Special Registers (Continued) 


Register Name Address Address Read/ 
SS Endian) (L. Endian) Write 


[SDinterface eee interface 


2 ees Rae Peso _ Baud Rate Prescaler 

SDI Command SerConmans Rumen _| 

|SDI Command Control | Command Control 

| RC) | SDiCommand Status | 


sO! ef 
so! oo eoee ___ 
so! oer 
R/W SDI Data / SD|Data/ Busy Timer | Timer 


SDIDTimer 0x5A000024 
|SDIDatacontrol Data control 


[a [sor Data Remain Counter | 
RG [sorbate sus 
2 


SSDIDAT | ox5A00003F__| oxsaoo00sc |B SDlData 
SDlintMsk | oxsaoo0040_— | |W 


Cautions on S3C2410A Special Registers 


1. In the little endian mode, L. endian address must be used. In the big endian mode, B. endian address must be 
used. 


The special registers have to be accessed for each recommended access unit. 


All registers except ADC registers, RTC registers and UART registers must be read/written in word unit (32-bit) 
at little/big endian. 


4. Make sure that the ADC registers, RTC registers and UART registers be read/written by the specified access 
unit and the specified address. Moreover, one must carefully consider which endian mode is used. 


5. W_ : 32-bit register, which must be accessed by LDR/STR or int type pointer(int *). 
HW : 16-bit register, which must be accessed by LDRH/STRH or short int type pointer(short int *). 
B  : 8-bit register, which must be accessed by LDRB/STRB or char type pointer(char int *). 
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PROGRAMMER'S MODEL 


OVERVIEW 


S3C2410A has been developed using the advanced ARM920T core, which has been designed by Advanced RISC 
Machines, Ltd. 

PROCESSOR OPERATING STATES 

From the programmer's point of view, the ARM920T can be in one of two states: 


e ARM state which executes 32-bit, word-aligned ARM instructions. 


e THUMB state which can execute 16-bit, halfword-aligned THUMB instructions. In this state, the PC uses bit 1 to 
select between alternate halfwords. 


NOTE 


Transition between these two states does not affect the processor mode or the contents of the registers. 


SWITCHING STATE 


Entering THUMB State 


Entry into THUMB state can be achieved by executing a BX instruction with the state bit (bit 0) set in the operand 
register. 


Transition to THUMB state will also occur automatically on return from an exception (IRQ, FIQ, UNDEF, ABORT, 
SWI etc.), if the exception was entered with the processor in THUMB state. 


Entering ARM State 
Entry into ARM state happens: 


e On execution of the BX instruction with the state bit clear in the operand register. 


e On the processor taking an exception (IRQ, FIQ, RESET, UNDEF, ABORT, SWI etc.). In this case, the PC is 
placed in the exception mode's link register, and execution commences at the exceptions vector address. 


MEMORY FORMATS 
ARM920T views memory as a linear collection of bytes numbered upwards from zero. Bytes 0 to 3 hold the first 


stored word, bytes 4 to 7 the second and so on. ARM920T can treat words in memory as being stored either in Big- 
Endian or Little-Endian format. 
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BIG-ENDIAN FORMAT 


In Big-Endian format, the most significant byte of a word is stored at the lowest numbered byte and the least 
significant byte at the highest numbered byte. Byte 0 of the memory system is therefore connected to data lines 31 
through 24. 


Higher Address Word Address 


Lower Address «Most significant byte is at lowest address. 
Word is addressed by byte address of most significant byte. 


Figure 2-1. Big-Endian Addresses of Bytes within Words 


LITTLE-ENDIAN FORMAT 
In Little-Endian format, the lowest numbered byte in a word is considered the word's least significant byte, and the 


highest numbered byte the most significant. Byte 0 of the memory system is therefore connected to data lines 7 
through 0. 


Higher Address Word Address 


Lower Address _ eLeast significant byte is at lowest address. 
Word is addressed by byte address of least significant byte. 


Figure 2-2. Little-Endian Addresses of Bytes within Words 


INSTRUCTION LENGTH 
Instructions are either 32 bits long (in ARM state) or 16 bits long (in THUMB state). 


Data Types 


ARM920T supports byte (8-bit), halfword (16-bit) and word (32-bit) data types. Words must be aligned to four-byte 
boundaries and half words to two-byte boundaries. 
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OPERATING MODES 
ARM920T supports seven modes of operation: 


e User (usr): The normal ARM program execution state 

e FIQ (fiq): Designed to support a data transfer or channel process 
e — IRQ (irq): Used for general-purpose interrupt handling 

e Supervisor (svc): Protected mode for the operating system 

e Abort mode (abt): Entered after a data or instruction prefetch abort 
e System (sys): A privileged user mode for the operating system 


e Undefined (und): Entered when an undefined instruction is executed 


Mode changes may be made under software control, or may be brought about by external interrupts or exception 
processing. Most application programs will execute in User mode. The non-user modes' known as privileged modes- 
are entered in order to service interrupts or exceptions, or to access protected resources. 


REGISTERS 


ARM920T has a total of 37 registers - 31 general-purpose 32-bit registers and six status registers - but these cannot 
all be seen at once. The processor state and operating mode dictate which registers are available to the programmer. 


The ARM State Register Set 


In ARM state, 16 general registers and one or two status registers are visible at any one time. In privileged (non- 
User) modes, mode-specific banked registers are switched in. Figure 2-3 shows which registers are available in each 
mode: the banked registers are marked with a shaded triangle. 


The ARM state register set contains 16 directly accessible registers: RO to R15. All of these except R15 are general- 
purpose, and may be used to hold either data or address values. In addition to these, there is a seventeenth register 
used to store status information. 


Register 14 is used as the subroutine link register. This receives a copy of R15 when a Branch and 
Link (BL) instruction is executed. At all other times it may be treated as a general- 
purpose register. The corresponding banked registers R14_svc, R14_irg, R14_fiq, 
R14_abt and R14_und are similarly used to hold the return values of R15 when 
interrupts and exceptions arise, or when Branch and Link instructions are executed 
within interrupt or exception routines. 


Register 15 holds the Program Counter (PC). In ARM state, bits [1:0] of R15 are zero and bits 
[31:2] contain the PC. In THUMB state, bit [0] is zero and bits [81:1] contain the PC. 
Register 16 is the CPSR (Current Program Status Register). This contains condition code flags 


and the current mode bits. 


FIQ mode has seven banked registers mapped to R8-14 (R8_fiq-R14_fiq). In ARM state, many FIQ handlers do not 
need to save any registers. User, IRQ, Supervisor, Abort and Undefined each have two banked registers mapped to 
R13 and R14, allowing each of these modes to have a private stack pointer and link registers. 
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System & User 


S3C2410A 


ARM State General Registers and Program Counter 


FIQ 


Di/D)|D}/D\|D 
als ine) 


D 
Q 


R8_fiq 
R9Q_fiq 
R10_figq 
R11_fig 
R12_fig 
R13 _figq 
R14 _fiq 
R15 (PC) 


| RO | 
| Re | 
| Ra 
| RS 
| R6 | 
Lae | 
NE 
DXR9_fia | 
DXR10_fia_| 
DXR11fia_| 
DXR12_fia_| 
DXR13_fia | 
DXR14 fia_| 


Supervisor Abort Undefined 


R15 (PC) 


R15 (PC) R1 5 (PC) 


ARM State Program Status Registers 


DSSPSR_svc] P\SPSR_abt| )\SPSR_irq 


bh» - banked register 


Figure 2-3. Register Organization in ARM State 
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The THUMB State Register Set 


The THUMB state register set is a subset of the ARM state set. The programmer has direct access to eight general 
registers, RO-R7, as well as the Program Counter (PC), a stack pointer register (SP), a link register (LR), and the 
CPSR. There are banked Stack Pointers, Link Registers and Saved Process Status Registers (SPSRs) for each 
privileged mode. This is shown in Figure 2-4. 


THUMB State General Registers and Program Counter 


System & User FIQ Supervisor Abort IRQ Undefined 


THUMB State Program Status Registers 


» - banked register 


Figure 2-4. Register Organization in THUMB state 
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The relationship between ARM and THUMB state registers 


The THUMB state registers relate to the ARM state registers in the following way: 


e THUMB state RO-R7 and ARM state RO-R7 are identical 

e THUMB state CPSR and SPSRs and ARM state CPSR and SPSRs are identical 

e THUMB state SP maps onto ARM state R13 

e THUMB state LR maps onto ARM state R14 

e The THUMB state Program Counter maps onto the ARM state Program Counter (R15) 


This relationship is shown in Figure 2-5. 


THUMB state ARM state 


R1 
R2 
R3 
R4 
R 
R 


Lo-registers 


Ri 
R2 
R3 
R4 
R5 
R7 
nore 

i ister (LR 


7 


R10 


rogram Counter (R15) 


Hi-registers 


Figure 2-5. Mapping of THUMB State Registers onto ARM State Registers 
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Accessing Hi-Registers in THUMB State 
In THUMB state, registers R8-R15 (the Hi registers) are not part of the standard register set. However, the assembly 
language programmer has limited access to them, and can use them for fast temporary storage. 


A value may be transferred from a register in the range RO-R7 (a Lo register) to a Hi register, and from a Hi register to 
a Lo register, using special variants of the MOV instruction. Hi register values can also be compared against or 
added to Lo register values with the CMP and ADD instructions. For more information, refer to Figure 3-34. 


THE PROGRAM STATUS REGISTERS 


The ARM920T contains a Current Program Status Register (CPSR), plus five Saved Program Status Registers 
(SPSRs) for use by exception handlers. These register's functions are: 


e Hold information about the most recently performed ALU operation 
e Control the enabling and disabling of interrupts 


e Set the processor operating mode 


The arrangement of bits is shown in Figure 2-6. 


Condition Code Flags (Reserved) Control Bits 


7 6 5 4 3 2 1 0 
fae ee ee fea een 
ee 


31. 30 29 28 27 26 25 24 23 


Overflow 
Carry/Borrow/Extend 


Mode bits 
State bit 


Zero FIQ disable 
Negative/Less Than IRQ disable 


Figure 2-6. Program Status Register Formats 
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The Condition Code Flags 


The N, Z, C and V bits are the condition code flags. These may be changed as a result of arithmetic and logical 
operations, and may be tested to determine whether an instruction should be executed. 


In ARM state, all instructions may be executed conditionally: see Table 3-2 for details. 
In THUMB state, only the Branch instruction is capable of conditional execution: see Figure 3-46 for details. 


The Control Bits 


The bottom 8 bits of a PSR (incorporating |, F, T and M[4:0]) are known collectively as the control bits. These will be 
changed when an exception arises. If the processor is operating in a privileged mode, they can also be manipulated 
by software. 


The T bit This reflects the operating state. When this bit is set, the processor is executing in THUMB 
state, otherwise it is executing in ARM state. This is reflected on the TBIT external signal. 


Note that the software must never change the state of the TBIT in the CPSR. If this 
happens, the processor will enter an unpredictable state. 


Interrupt disable The | and F bits are the interrupt disable bits. When set, these disable the IRQ and FIQ 
bits interrupts respectively. 


The mode bits The M4, M3, M2, M1 and MO bits (M[4:0]) are the mode bits. These determine the 
processor's operating mode, as shown in Table 2-1. Not all combinations of the mode bits 
define a valid processor mode. Only those explicitly described shall be used. The user 
should be aware that if any illegal value is programmed into the mode bits, M[4:0], then the 
processor will enter an unrecoverable state. If this occurs, reset should be applied. 


Reserved bits The remaining bits in the PSRs are reserved. When changing a PSR's flag or control bits, 
you must ensure that these unused bits are not altered. Also, your program should not rely 
on them containing specific values, since in future processors they may read as one or zero. 
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Table 2-1. PSR Mode Bit Values 


M[4:0] | Mode —| Visible THUMB state registers Visible ARM state registers 


40000 User R7..RO, R14..RO, 

LR, SP PC, CPSR 

PC, CPSR 
10001 FIQ R7..RO, R7..RO, 

LR_fig, SP_fiq R14_fig..R8_fiq, 

PC, CPSR, SPSR_fiq PC, CPSR, SPSR_fiq 
10010 ae R7..RO, R12..R0, 


LR_irg, SP_irq R14_irg, R13_irq, 
PC, CPSR, SPSR_irq PC, CPSR, SPSR_irq 


10011 Supervisor R7..RO, R12..R0, 
LR_svc, SP_sve, R14 svc, R13 sve, 
PC, CPSR, SPSR_svc PC, CPSR, SPSR_svc 
10111 Abort R7..RO, R12..R0, 
LR_abt, SP_abt, R14_abt, R13 abt, 
PC, CPSR, SPSR_abt PC, CPSR, SPSR_abt 
11011 Undefined R7..RO R12..R0, 
LR_und, SP_und, R14_und, R13_und, 
PC, CPSR, SPSR_und PC, CPSR 
11111 System R7..RO, R14..R0, 
LR, SP PC, CPSR 
PC, CPSR 


Reserved bits The remaining bits in the PSR's are reserved. When changing a PSR's flag or control bits, 
you must ensure that these unused bits are not altered. Also, your program should not rely 
on them containing specific values, since in future processors they may read as one or 
zero. 
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EXCEPTIONS 


Exceptions arise whenever the normal flow of a program has to be halted temporarily, for example to service an 
interrupt from a peripheral. Before an exception can be handled, the current processor state must be preserved so 
that the original program can resume when the handler routine has finished. 


It is possible for several exceptions to arise at the same time. If this happens, they are dealt with in a fixed order. 

See Exception Priorities on page 2-14. 

Action on Entering an Exception 

When handling an exception, the ARM920T: 

1. Preserves the address of the next instruction in the appropriate Link Register. If the exception has been entered 
from ARM state, then the address of the next instruction is copied into the Link Register (that is, current PC + 4 
or PC + 8 depending on the exception. See Table 2-2 on for details). If the exception has been entered from 
THUMB state, then the value written into the Link Register is the current PC offset by a value such that the 
program resumes from the correct place on return from the exception. This means that the exception handler 
need not determine which state the exception was entered from. For example, in the case of SWI, MOVS PC, 


R14_svc will always return to the next instruction regardless of whether the SWI was executed in ARM or 
THUMB state. 


Copies the CPSR into the appropriate SPSR 
Forces the CPSR mode bits to a value which depends on the exception 


Forces the PC to fetch the next instruction from the relevant exception vector 


It may also set the interrupt disable flags to prevent otherwise unmanageable nestings of exceptions. 


If the processor is in THUMB state when an exception occurs, it will automatically switch into ARM state when the 
PC is loaded with the exception vector address. 


Action on Leaving an Exception 
On completion, the exception handler: 


1. Moves the Link Register, minus an offset where appropriate, to the PC. (The offset will vary depending on the 
type of exception.) 


Copies the SPSR back to the CPSR 
Clears the interrupt disable flags, if they were set on entry 


NOTE 


An explicit switch back to THUMB state is never needed, since restoring the CPSR from the SPSR 
automatically sets the T bit to the value it held immediately prior to the exception. 
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Exception Entry/Exit Summary 


Table 2-2 summarizes the PC value preserved in the relevant R14 on exception entry, and the recommended 
instruction for exiting the exception handler. 


Table 2-2. Exception Entry/Exit 


Return Instruction Previous State 
ARM R14 _ x THUMB R14_x 


MOV PC, R14 

MOVS PC, R14_svc 
MOVS PC, R14_und 
SUBS PC, R14_fig, #4 
SUBS PC, R14 _irq, #4 
SUBS PC, R14_abt, #4 
SUBS PC, R14_abt, #8 
NA 


1 
1 
1 
2 
2 
1 
3 
4 


NOTES: 

1. Where PC is the address of the BL/SWI/Undefined Instruction fetch which had the prefetch abort. 

2. Where PC is the address of the instruction which did not get executed since the FIQ or IRQ took priority. 
3. Where PC is the address of the Load or Store instruction which generated the data abort. 

4. The value saved in R14_svc upon reset is unpredictable. 


FIQ 


The FIQ (Fast Interrupt Request) exception is designed to support a data transfer or channel process, and in ARM 
state has sufficient private registers to remove the need for register saving (thus minimizing the overhead of context 
switching). 


FIQ is externally generated by taking the nFIQ input LOW. This input can except either synchronous or 
asynchronous transitions, depending on the state of the ISYNC input signal. When ISYNC is LOW, nFIQ and nIRQ 
are considered asynchronous, and a cycle delay for synchronization is incurred before the interrupt can affect the 
processor flow. 


Irrespective of whether the exception was entered from ARM or Thumb state, a FIQ handler should leave the interrupt 
by executing 


SUBS PC,R14_fiq,#4 


FIQ may be disabled by setting the CPSR's F flag (but note that this is not possible from User mode). If the F flag is 
clear, ARM920T checks for a LOW level on the output of the FIQ synchronizer at the end of each instruction. 
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IRQ 


The IRQ (Interrupt Request) exception is a normal interrupt caused by a LOW level on the nIRQ input. IRQ has a 
lower priority than FIQ and is masked out when a FIQ sequence is entered. It may be disabled at any time by setting 
the | bit in the CPSR, though this can only be done from a privileged (non-User) mode. 


Irrespective of whether the exception was entered from ARM or Thumb state, an IRQ handler should return from the 
interrupt by executing 


SUBS PC,R14_irg,#4 


Abort 
An abort indicates that the current memory access cannot be completed. It can be signaled by the external ABORT 
input. ARM920T checks for the abort exception during memory access cycles. 


There are two types of abort: 


e Prefetch abort: occurs during an instruction prefetch. 


e Data abort: occurs during a data access. 


If a prefetch abort occurs, the prefetched instruction is marked as invalid, but the exception will not be taken until the 
instruction reaches the head of the pipeline. If the instruction is not executed - for example because a branch occurs 
while it is in the pipeline - the abort does not take place. 


If a data abort occurs, the action taken depends on the instruction type: 


e Single data transfer instructions (LDR, STR) write back modified base registers: the Abort handler must be aware 
of this. 


e The swap instruction (SWP) is aborted as though it had not been executed. 


e Block data transfer instructions (_DM, STM) complete. If write-back is set, the base is updated. If the instruction 
would have overwritten the base with data (ie it has the base in the transfer list), the overwriting is prevented. All 
register overwriting is prevented after an abort is indicated, which means in particular that R15 (always the last 
register to be transferred) is preserved in an aborted LDM instruction. 


The abort mechanism allows the implementation of a demand paged virtual memory system. In such a system the 
processor is allowed to generate arbitrary addresses. When the data at an address is unavailable, the Memory 
Management Unit (MMU) signals an abort. The abort handler must then work out the cause of the abort, make the 
requested data available, and retry the aborted instruction. The application program needs no knowledge of the 
amount of memory available to it, nor is its state in any way affected by the abort. 


After fixing the reason for the abort, the handler should execute the following irrespective of the state (ARM or 
Thumb): 


SUBS PC,R14_abt,#4 ; fora prefetch abort, or 
SUBS PC,R14_abt,#8 ; for a data abort 


This restores both the PC and the CPSR, and retries the aborted instruction. 
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Software Interrupt 


The software interrupt instruction (SWI) is used for entering Supervisor mode, usually to request a particular 
supervisor function. A SWI handler should return by executing the following irrespective of the state (ARM or Thumb): 


MOV PC,R14_svc 


This restores the PC and CPSR, and returns to the instruction following the SWI. 


NOTE 
nFIQ, nIRQ, ISYNC, LOCK, BIGEND, and ABORT pins exist only in the ARM920T CPU core. 


Undefined Instruction 


When ARM920T comes across an instruction which it cannot handle, it takes the undefined instruction trap. This 
mechanism may be used to extend either the THUMB or ARM instruction set by software emulation. 


After emulating the failed instruction, the trap handler should execute the following irrespective of the state (ARM or 
Thumb): 


MOVS PC,R14_und 


This restores the CPSR and returns to the instruction following the undefined instruction. 


Exception Vectors 


The following table shows the exception vector addresses. 


Table 2-3. Exception Vectors 


ee 
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Exception Priorities 


When multiple exceptions arise at the same time, a fixed priority system determines the order in which they are 
handled: 


Highest priority: 


1. Reset 

2. Data abort 

3. FIQ 

4. IRQ 

5. Prefetch abort 


Lowest priority: 


6. Undefined Instruction, Software interrupt. 


Not All Exceptions Can Occur at Once: 


Undefined Instruction and Software Interrupt are mutually exclusive, since they each correspond to particular (non- 
overlapping) decodings of the current instruction. 


If a data abort occurs at the same time as a FIQ, and FIQs are enabled (ie the CPSR's F flag is clear), ARM920T 
enters the data abort handler and then immediately proceeds to the FIQ vector. A normal return from FIQ will cause 
the data abort handler to resume execution. Placing data abort at a higher priority than FIQ is necessary to ensure 
that the transfer error does not escape detection. The time for this exception entry should be added to worst-case 
FIQ latency calculations. 
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INTERRUPT LATENCIES 


The worst case latency for FIQ, assuming that it is enabled, consists of the longest time the request can take to 
pass through the synchronizer (Tsyncmax if asynchronous), plus the time for the longest instruction to complete 
(Tldm, the longest instruction is an LDM which loads all the registers including the PC), plus the time for the data 
abort entry (Texc), plus the time for FIQ entry (Tfiq). At the end of this time ARM920T will be executing the 
instruction at Ox1C. 


Tsyncmax is 3 processor cycles, Tldm is 20 cycles, Texc is 3 cycles, and Tfiq is 2 cycles. The total time is 
therefore 28 processor cycles. This is just over 1.4 microseconds in a system which uses a continuous 20 MHz 
processor clock. The maximum IRQ latency calculation is similar, but must allow for the fact that FIQ has higher 
priority and could delay entry into the IRQ handling routine for an arbitrary length of time. The minimum latency for 
FIQ or IRQ consists of the shortest time the request can take through the synchronizer (Tsyncmin) plus Tfig. This is 
4 processor cycles. 


RESET 


When the nRESET signal goes LOW, ARM920T abandons the executing instruction and then continues to fetch 
instructions from incrementing word addresses. 


When nRESET goes HIGH again, ARM920T: 


1. Overwrites R14 svc and SPSR_svc by copying the current values of the PC and CPSR into them. The value of 
the saved PC and SPSR is not defined. 


Forces M[4:0] to 10011 (Supervisor mode), sets the | and F bits in the CPSR, and clears the CPSR's T bit. 
Forces the PC to fetch the next instruction from address 0x00. 
Execution resumes in ARM state. 
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ARM INSTRUCTION SET 


INSTRUCTION SET SUMMAY 


This chapter describes the ARM instruction set in the ARM920T core. 


FORMAT SUMMARY 


The ARM instruction set formats are shown below. 


31 30 29 28 27 26 25 24 23 22 2120191817 1615 14131211109876543210 


Operand2 Data/Processing/ 
PSR Transfer 


Multiply 


Fone fofoffo| flare [mato [ms [ofos| An | wu Lo 
cone Jofafo|sfofefofof rm [Fe _fofofofo Single Daa Se 


; i Jofol 4] 
F-conafofofolsfofols ol PRET] [+fs]sfololo[s[ An | erancn and exchange 
re PRPPREL ® | PRPPH | ameezrr 

register offset 
Pe PPB m= [™ [om Pei om ets 
immendiate offset 


Teens lols] efufahala[ ae | Sn Data rant 


| rr 
N00 oe 


Cond CP Opc Rm Coprocessor Data Operation 


Opc 


| Cond _| Hf i 1 Ignored by processor Software Interrupt 


31 30 29 28 27 26 25 24 23 22 2120191817 1615 14131211109876543210 


Figure 3-1. ARM Instruction Set Format 
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NOTE 


Some instruction codes are not defined but do not cause the Undefined instruction trap to be taken, for 
instance a Multiply instruction with bit 6 changed to a 1. These instructions should not be used, as their 
action may change in future ARM implementations. 


INSTRUCTION SUMMARY 


Table 3-1. The ARM Instruction Set 


| Mnemonic | instruction =| Action 
iB T~«*BranchSSC~S~i aos CS 
CDP (Coprocessor-specific) 
EOR Rd: = (Rn AND NOT Op2) 

OR (Op2 AND NOT Rn) 
LDM Stack manipulation (Pop) 


MCR Move CPU register to coprocessor cRn: = rRn {<op>cRm} 
register 


MLA Multiply Accumulate Rd: = (Rm x Rs) + Rn 
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Table 3-1. The ARM Instruction Set (Continued) 


Move from coprocessor register to Rn: = cRn {<op>cRm} 
CPU register 


fom OORSS~*~*~iCR NOR 
STM Stack manipulation (Push) 

Swi 
Swe 
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THE CONDITION FIELD 


In ARM state, all instructions are conditionally executed according to the state of the CPSR condition codes and the 
instruction's condition field. This field (bits 31:28) determines the circumstances under which an instruction is to be 
executed. If the state of the C, N, Z and V flags fulfils the conditions encoded by the field, the instruction is 
executed, otherwise it is ignored. 


There are sixteen possible conditions, each represented by a two-character suffix that can be appended to the 
instruction's mnemonic. For example, a Branch (B in assembly language) becomes BEQ for "Branch if Equal", which 
means the Branch will only be taken if the Z flag is set. 


In practice, fifteen different conditions may be used: these are listed in Table 3-2. The sixteenth (1111) is reserved, 
and must not be used. 


In the absence of a suffix, the condition field of most instructions is set to "Always" (suffix AL). This means the 
instruction will always be executed regardless of the CPSR condition codes. 


Table 3-2. Condition Code Summary 


es 
OO 0 Cc 
footed 
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BRANCH AND EXCHANGE (BX) 


This instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. 


This instruction performs a branch by copying the contents of a general register, Rn, into the program counter, PC. 
The branch causes a pipeline flush and refill from the address specified by Rn. This instruction also permits the 
instruction set to be exchanged. When the instruction is executed, the value of Rn[0] determines whether the 
instruction stream will be decoded as ARM or THUMB instructions. 


28 27 24 23 20 19 16 15 12 11 


A CT CO CT CO 


[3:0] Operand Register 
If bitO of Rn = 1, subsequent instructions decoded as THUMB instructions 
If bitO of Rn =0, subsequent instructions decoded as ARM instructions 


[31:28] Condition Field 


Figure 3-2. Branch and Exchange Instructions 


INSTRUCTION CYCLE TIMES 

The BX instruction takes 2S + 1N cycles to execute, where S and N are defined as sequential (S-cycle) and non- 
sequential (N-cycle), respectively. 

ASSEMBLER SYNTAX 

BX - branch and exchange. 

BX {cond} Rn 


{cond} Two character condition mnemonic. See Table 3-2. 
Rn is an expression evaluating to a valid register number. 


USING R15 AS AN OPERAND 


If R15 is used as an operand, the behavior is undefined. 
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Examples 


ADR RO, Into_THUMB + 1 ; Generate branch target address 
; and set bit 0 high - hence 
; arrive in THUMB state. 


BX RO ; Branch and change to THUMB 
; state. 
CODE16 ; Assemble subsequent code as 
Into_ THUMB ; THUMB instructions 
ADR R85, Back_to_ARM ; Generate branch target to word aligned address 
; - hence bit 0 is low and so change back to ARM state. 
BX R5 ; Branch and change back to ARM state. 
ALIGN ; Word align 
CODE32 ; Assemble subsequent code as ARM instructions 
Back_to ARM 
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BRANCH AND BRANCH WITH LINK (B, BL) 


The instruction is only executed if the condition is true. The various conditions are defined Table 3-2. The instruction 
encoding is shown in Figure 3-3, below. 


31 28 27 ~=—25 24 23 0 


p_cond JY oton Pep tts 


[24] Link bit 
0 =Branch 1 = Branch with link 


[31:28] Condition Field 


Figure 3-3. Branch Instructions 


Branch instructions contain a signed 2's complement 24-bit offset. This is shifted left two bits, sign extended to 32 
bits, and added to the PC. The instruction can therefore specify a branch of +/- 32Mbytes. The branch offset must 
take account of the prefetch operation, which causes the PC to be 2 words (8 bytes) ahead of the current instruction. 


Branches beyond +/- 32Mbytes must use an offset or absolute destination which has been previously loaded into a 
register. In this case the PC should be manually saved in R14 if a Branch with Link type operation is required. 
THE LINK BIT 


Branch with Link (BL) writes the old PC into the link register (R14) of the current bank. The PC value written into R14 
is adjusted to allow for the prefetch, and contains the address of the instruction following the branch and link 
instruction. Note that the CPSR is not saved with the PC and R14[1:0] are always cleared. 


To return from a routine called by Branch with Link use MOV PC,R14 if the link register is still valid or LDM 
Rn!,{..PC} if the link register has been saved onto a stack pointed to by Rn. 


INSTRUCTION CYCLE TIMES 


Branch and Branch with Link instructions take 2S + 1N incremental cycles, where S and N are defined as sequential 
(S-cycle) and internal (I-cycle). 
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ASSEMBLER SYNTAX 


S3C2410A 


Items in {} are optional. Items in <> must be present. 


B{L}{cond} <expression> 


{L} 
{cond} 


<expression> 


Examples 


here BAL 


3-8 


Used to request the Branch with Link form of the instruction. If absent, R14 will not be 
affected by the instruction. 


A two-character mnemonic as shown in Table 3-2. If absent then AL (ALways) will be 
used. 


The destination. The assembler calculates the offset. 


here ; Assembles to OxEAFFFFFE (note effect of PC offset). 
there ; Always condition used as default. 
R1,#0 ; Compare R1 with zero and branch to fred 
; if R1 was zero, otherwise continue. 
fred ; Continue to next instruction. 
sub+ROM ; Call subroutine at computed address. 
R1,#1 ; Add 1 to register 1, setting CPSR flags 
; on the result then call subroutine if 
sub ; the C flag is clear, which will be the 


; case unless R1 held OxFFFFFFFF. 
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DATA PROCESSING 


The data processing instruction is only executed if the condition is true. The conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-4. 


28 27 26 25 24 21 20 19 1615 12 11 0 


red [oo [tl oncom Te] me | ome 


[15:12] Destination register 
0 = Branch 1 = Branch with link 


[19:16] 1st operand register 
0 = Branch 1 = Branch with link 


[20] Set condition codes 
0 = Do not after condition codes 1 = Set condition codes 


[24:21] Operation codes 

0000 = AND-Rd: = Op1 AND Op2 

0001 = EOR-Rd: = Op1 EOR Op2 

0010 = SUB-Rd: = Op1-Op2 

0011 = RSB-Rd: = Op2-Op1 

0100 = ADD-Rd: = Op1+Op2 

0101 = ADC-Rd: = Op1+Op2+C 

0110 = SBC-Rd: = OP1-Op2+C-1 

0111 = RSC-Rd: = Op2-Op1+C-1 

1000 = TST-set condition codes on Op1 AND Op2 
1001 = TEO-set condition codes on OP1 EOR Op2 
1010 = CMP-set condition codes on Op1-Op2 
1011 = SMN-set condition codes on Op1+Op2 
1100 = ORR-Rd: = Op1 OR Op2 

1101 = MOV-Rd: =Op2 

1110 = BIC-Rd: = Op1 AND NOT Op2 

1111 =MVN-Rd: = NOT Op2 


[25] Immediate operand 
0 = Operand 2 is a register 1 = Operand 2 is an immediate value 


[11:0] Operand 2 type selection 

11 3.4 0 

[3:0] 2nd operand register [11:4] Shift applied to Rm 
11 8 7 


[7:0] Unsigned 8 bit immediate value [11:8] Shift applied to Imm 


[31:28] Condition field 


Figure 3-4. Data Processing Instructions 
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The instruction produces a result by performing a specified arithmetic or logical operation on one or two operands. 
The first operand is always a register (Rn). 


The second operand may be a shifted register (Rm) or a rotated 8 bit immediate value (Imm) according to the value of 
the | bit in the instruction. The condition codes in the CPSR may be preserved or updated as a result of this 
instruction, according to the value of the S bit in the instruction. 


Certain operations (TST, TEQ, CMP, CMN) do not write the result to Rd. They are used only to perform tests and to 


set the condition codes on the result and always have the S bit set. The instructions and their effects are listed in 
Table 3-3. 
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CPSR FLAGS 


The data processing operations may be classified as logical or arithmetic. The logical operations (AND, EOR, TST, 
TEQ, ORR, MOV, BIC, MVN) perform the logical action on all corresponding bits of the operand or operands to 
produce the result. If the S bit is set (and Rd is not R15, see below) the V flag in the CPSR will be unaffected, the C 
flag will be set to the carry out from the barrel shifter (or preserved when the shift operation is LSL #0), the Z flag will 
be set if and only if the result is all zeros, and the N flag will be set to the logical value of bit 31 of the result. 


Table 3-3. ARM Data Processing Instructions 


[Assembler Mnemonic | OPCode | SSSS~SAo 
Wu 
Pp oRR «| S00 ~—~—~—~=*ipeandt OR operand? 
MOV Operand2 (operand is ignored) 
BIC Operand1 AND NOT operand? (Bit clear) 
MVN NOT operand2 (operand is ignored) 


The arithmetic operations (SUB, RSB, ADD, ADC, SBC, RSC, CMP, CMN) treat each operand as a 32 bit integer 
(either unsigned or 2's complement signed, the two are equivalent). If the S bit is set (and Rd is not R15) the V flag in 
the CPSR will be set if an overflow occurs into bit 31 of the result; this may be ignored if the operands were 
considered unsigned, but warns of a possible error if the operands were 2's complement signed. The C flag will be 
set to the carry out of bit 31 of the ALU, the Z flag will be set if and only if the result was zero, and the N flag will be 
set to the value of bit 31 of the result (indicating a negative result if the operands are considered to be 2's 
complement signed). 
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SHIFTS 


When the second operand is specified to be a shifted register, the operation of the barrel shifter is controlled by the 
Shift field in the instruction. This field indicates the type of shift to be performed (logical left or right, arithmetic right or 
rotate right). The amount by which the register should be shifted may be contained in an immediate field in the 
instruction, or in the bottom byte of another register (other than R15). The encoding for the different shift types is 
shown in Figure 3-5. 


[6:5] Shift type [6:5] Shift type 


00 = logical left 01 = logical right 00 = logical left 01 = logical right 
10 =arithmetic right 11 =rotate right 10 =arithmetic right 11 =rotate right 


[11:7] Shift amount [11:8] Shift register 
5 bit unsigned integer Shift amount specified in bottom-byte of Rs 


Figure 3-5. ARM Shift Operations 


Instruction specified shift amount 


When the shift amount is specified in the instruction, it is contained in a 5-bit field which may take any value from 0 
to 31. A logical shift left (LSL) takes the contents of Rm and moves each bit by the specified amount to a more 
significant position. The least significant bits of the result are filled with zeros, and the high bits of Rm which do not 
map into the result are discarded, except that the least significant discarded bit becomes the shifter carry output 
which may be latched into the C bit of the CPSR when the ALU operation is in the logical class (see above). For 
example, the effect of LSL #5 is shown in Figure 3-6. 


Contents of Rm 


carry out 


Value of Operand 2 00000 


Figure 3-6. Logical Shift Left 


NOTE 


LSL #0 is a special case, where the shifter carry out is the old value of the CPSR C flag. The contents of Rm 
are used directly as the second operand. A logical shift right (LSR) is similar, but the contents of Rm are 
moved to less significant positions in the result. LSR #5 has the effect shown in Figure 3-7. 
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31 5 4 0 
Contents of Rm 


carry out 


00000 Value of Operand 2 


Figure 3-7. Logical Shift Right 


The form of the shift field which might be expected to correspond to LSR #0 is used to encode LSR #32, which has a 
zero result with bit 31 of Rm as the carry output. Logical shift right zero is redundant as it is the same as logical shift 
left zero, so the assembler will convert LSR #0 (and ASR #0 and ROR #0) into LSL #0, and allow LSR #82 to be 
specified. 


An arithmetic shift right (ASR) is similar to logical shift right, except that the high bits are filled with bit 31 of Rm 


instead of zeros. This preserves the sign in 2's complement notation. For example, ASR #5 is shown in Figure 
3-8. 


Contents of Rm 


carry out 


Value of Operand 2 


Figure 3-8. Arithmetic Shift Right 


The form of the shift field which might be expected to give ASR #0 is used to encode ASR #32. Bit 31 of Rm is again 
used as the carry output, and each bit of operand 2 is also equal to bit 31 of Rm. The result is therefore all ones or 
all zeros, according to the value of bit 31 of Rm. 
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Rotate right (ROR) operations reuse the bits which "overshoot" in a logical shift right operation by reintroducing them 
at the high end of the result, in place of the zeros used to fill the high end in logical right operations. For example, 
ROR #5 is shown in Figure 3-9. 


31 5 4 0 


Contents of Rm 


carry out 


Value of Operand 2 


Figure 3-9. Rotate Right 


The form of the shift field which might be expected to give ROR #0 is used to encode a special function of the barrel 
shifter, rotate right extended (RRX). This is a rotate right by one bit position of the 33 bit quantity formed by 
appending the CPSR C flag to the most significant end of the contents of Rm as shown in Figure 3-10. 


Contents of Rm 


in : 
Value of Operand 2 


Figure 3-10. Rotate Right Extended 
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Register Specified Shift Amount 


Only the least significant byte of the contents of Rs is used to determine the shift amount. Rs can be any general 
register other than R15. 


If this byte is zero, the unchanged contents of Rm will be used as the second operand, and the old value of the 
CPSR C flag will be passed on as the shifter carry output. 


If the byte has a value between 1 and 31, the shifted result will exactly match that of an instruction specified shift 
with the same value and shift operation. 


If the value in the byte is 32 or more, the result will be a logical extension of the shift described above: 


ie 


NO ao FF WO ND 


LSL by 32 has result zero, carry out equal to bit 0 of Rm. 

LSL by more than 32 has result zero, carry out zero. 

LSR by 32 has result zero, carry out equal to bit 31 of Rm. 

LSR by more than 32 has result zero, carry out zero. 

ASR by 32 or more has result filled with and carry out equal to bit 31 of Rm. 
ROR by 32 has result equal to Rm, carry out equal to bit 31 of Rm. 


ROR by n where n is greater than 32 will give the same result and carry out as ROR by n-32; therefore 
repeatedly subtract 32 from n until the amount is in the range 1 to 32 and see above. 


NOTE 


The zero in bit 7 of an instruction with a register controlled shift is compulsory; a one in this bit will cause 
the instruction to be a multiply or undefined instruction. 
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IMMEDIATE OPERAND ROTATES 


The immediate operand rotate field is a 4-bit unsigned integer which specifies a shift operation on the 8-bit immediate 
value. This value is zero extended to 32 bits, and then subject to a rotate right by twice the value in the rotate field. 
This enables many common constants to be generated, for example all powers of 2. 


WRITING TO R15 


When Rd is a register other than R15, the condition code flags in the CPSR may be updated from the ALU flags as 
described above. 


When Rd is R15 and the S flag in the instruction is not set the result of the operation is placed in R15 and the CPSR 
is unaffected. 


When Rad is R15 and the S flag is set the result of the operation is placed in R15 and the SPSR corresponding to the 
current mode is moved to the CPSR. This allows state changes which atomically restore both PC and CPSR. This 
form of instruction should not be used in User mode. 


USING R15 AS AN OPERANDY 
If R15 (the PC) is used as an operand in a data processing instruction the register is used directly. 


The PC value will be the address of the instruction, plus 8 or 12 bytes due to instruction prefetching. If the shift 
amount is specified in the instruction, the PC will be 8 bytes ahead. If a register is used to specify the shift amount 
the PC will be 12 bytes ahead. 


TEQ, TST, CMP AND CMN OPCODES 


NOTE 


TEQ, TST, CMP and CMN do not write the result of their operation but do set flags in the CPSR. An 
assembler should always set the S flag for these instructions even if this is not specified in the mnemonic. 


The TEQP form of the TEQ instruction used in earlier ARM processors must not be used: the PSR transfer 
operations should be used instead. 


The action of TEQP in the ARM920T is to move SPSR_<mode> to the CPSR if the processor is in a privileged mode 
and to do nothing if in User mode. 


INSTRUCTION CYCLE TIMES 


Data Processing instructions vary in the number of incremental cycles taken as follows: 


Table 3-4. Incremental Cycle Times 


Data processing with register specified shift 1$ +1 


Data processing with PC written 25 + 1N 
Data processing with register specified shift and PC written 2S + 1N +11 


NOTE: S, Nand |are as defined sequential (S-cycle), non-sequential (N-cycle), and internal (l-cycle) respectively. 


agi” 
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ASSEMBLER SYNTAX 
« MOV,MVN (single operand instructions). 
<opcode>{cond}{S} Rd,<Op2> 


e CMP,CMN,TEQ,TST (instructions which do not produce a result). 
<opcode>{cond} Rn,<Op2> 


e AND,EOR,SUB,RSB,ADD,ADC,SBC,RSC,ORR,BIC 
<opcode>{cond}{S} Rd,Rn,<Op2> 


where: 
<Op2> Rm{,<shift>} or,<#expression> 
{cond} A two-character condition mnemonic. See Table 3-2. 
{S} Set condition codes if S present (implied for CMP, CMN, TEQ, TST). 
Rd, Rn and Rm Expressions evaluating to a register number. 
<#expression> If this is used, the assembler will attempt to generate a shifted immediate 8-bit field to 
match the expression. If this is impossible, it will give an error. 
<shift> <Shiftname> <register> or <shiftname> #expression, or RRX (rotate right one bit with 
extend). 
<shiftname>s ASL, LSL, LSR, ASR, ROR. (ASL is a synonym for LSL, they assemble to the same 
code.) 
EXAMPLES 
ADDEQ R2,R4,R5 ; If the Z flag is set make R2:=R4+R5 
TEQS R4,#3 ; Test R4 for equality with 3. 


; (The S is in fact redundant as the 
; assembler inserts it automatically.) 
SUB R4,R5,R7,LSR R2 ; Logical right shift R7 by the number in 
; the bottom byte of R2, subtract result 
; from R5, and put the answer into R4. 
MOV PC,R14 ; Return from subroutine. 
MOVS PC,R14 ; Return from exception and restore CPSR 
; from SPSR_mode. 
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PSR TRANSFER (MRS, MSR) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. 


The MRS and MSR instructions are formed from a subset of the Data Processing operations and are implemented 
using the TEQ, TST, CMN and CMP instructions without the S flag set. The encoding is shown in Figure 3-11. 


These instructions allow access to the CPSR and SPSR registers. The MRS instruction allows the contents of the 
CPSR or SPSR_<mode> to be moved to a general register. The MSR instruction allows the contents of a general 
register to be moved to the CPSR or SPSR_<mode> register. 


The MSR instruction also allows an immediate value or register contents to be transferred to the condition code flags 
(N,Z,C and V) of CPSR or SPSR_<mode> without affecting the control bits. In this case, the top four bits of the 
specified register contents or 32 bit immediate value are written to the top four bits of the relevant PSR. 


OPERAND RESTRICTIONS 
e Inuser mode, the control bits of the CPSR are protected from change, so only the condition code flags of the 
CPSR can be changed. In other (privileged) modes the entire CPSR can be changed. 


« Note that the software must never change the state of the T bit in the CPSR. If this happens, the processor will 
enter an unpredictable state. 


e« The SPSR register which is accessed depends on the mode at the time of execution. For example, only 
SPSR_fig is accessible when the processor is in FIQ mode. 


e« You must not specify R15 as the source or destination register. 


e Also, do not attempt to access an SPSR in User mode, since no such register exists. 
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MRS (transfer PSR contents to a register) 
31 28 27 23 22 21 16 15 12 11 0 


ee a 


[15:12] Destination Register 


[22] Source PSR 
0=CPSR 1 = SPSR_<current mode> 


[31:28] Condition Field 


MSR (transfer register contents to PSR) 
31 28 27 23 22 21 12 11 


[cond] 00010 ro] vovoons | coonccco 


[3:0] Source Register 


[22] Destination PSR 
0=CPSR 1 = SPSR_<current mode> 


[31:28] Condition Field 


MSR (transfer register contents or immediate value to PSR flag bits only) 
31 28 27 26 25 24 23 22 21 12 11 


|_cona_| oo Ji] 10 [Pd Source operand 


[22] Destination PSR 
0=CPSR 1 = SPSR_<current mode> 


[25] Immediate Operand 
0 = Source operand is a register 
1 =SPSR_<current mode> 


[11:0] Source Operand 


[3:0] Source Register 
[11:4] Source operand is an immediate value 


11 8 7 0 


[Rowe | mm 


[7:0] Unsigned 8 bit immediate value 
[11:8] Shift applied to Imm 


[31:28] Condition Field 


Figure 3-11. PSR Transfer 
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RESERVED BITS 


Only twelve bits of the PSR are defined in ARM920T (N,Z,C,V,I,F, T & M[4:0]); the remaining bits are reserved for use 
in future versions of the processor. Refer to Figure 2-6 for a full description of the PSR bits. 


To ensure the maximum compatibility between ARM920T programs and future processors, the following rules should 
be observed: 


e The reserved bits should be preserved when changing the value in a PSR. 


e Programs should not rely on specific values from the reserved bits when checking the PSR status, since they 
may read as one or zero in future processors. 


A read-modify-write strategy should therefore be used when altering the control bits of any PSR register; this involves 
transferring the appropriate PSR register to a general register using the MRS instruction, changing only the relevant 
bits and then transferring the modified value back to the PSR register using the MSR instruction. 


EXAMPLES 


The following sequence performs a mode change: 


MRS RO,CPSR ; Take a copy of the CPSR. 

BIC RO,RO,#0x1F ; Clear the mode bits. 

ORR RO,RO,#new_mode ; Select new mode 

MSR CPSR,RO ; Write back the modified CPSR. 


When the aim is simply to change the condition code flags in a PSR, a value can be written directly to the flag bits 
without disturbing the control bits. The following instruction sets the N,Z,C and V flags: 


MSR CPSR_flg,#0xFO000000 ; Set all the flags regardless of their previous state 
; (does not affect any control bits). 


No attempt should be made to write an 8-bit immediate value into the whole PSR since such an operation cannot 
preserve the reserved bits. 


INSTRUCTION CYCLE TIMES 


PSR transfers take 1S incremental cycles, where S is defined as Sequential (S-cycle). 
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ASSEMBLY SYNTAX 


e MRS - transfer PSR contents to a register 
MRS{cond} Rd,<psr> 


e MSR - transfer register contents to PSR 
MSR{conq} <psr>,Rm 


ARM INSTRUCTION SET 


« MSR- transfer register contents to PSR flag bits only 


MSR{cond} <psrf>,Rm 


The most significant four bits of the register contents are written to the N,Z,C & V flags respectively. 


« MSR- transfer immediate value to PSR flag bits only 


MSR{cond} <psrf>,<#expression> 


The expression should symbolise a 32-bit value of which the most significant four bits are written to the N,Z,C and V 


flags respectively. 


CPSR, CPSR_all, SPSR or SPSR_all. (CPSR and CPSR_all are synonyms as are SPSR 


Where this is used, the assembler will attempt to generate a shifted immediate 8-bit field 


to match the expression. If this is impossible, it will give an error. 


Key: 
{cond} Two-character condition mnemonic. See Table 3-2.. 
Rd and Rm Expressions evaluating to a register number other than R15 
<psr> 
and SPSR_all) 
<psrf> CPSR_flg or SPSR_fig 
<#expression> 
EXAMPLES 


In User mode the instructions behave as follows: 


MSR CPSR_all,Rm 

MSR CPSR_flg,Rm 

MSR CPSR_flg,#0xA0000000 
MRS Rd,CPSR 


In privileged modes the instructions behave as follows: 


MSR CPSR_all,Rm 

MSR CPSR_fig,Rm 

MSR CPSR_flg,#0x50000000 
MSR SPSR_all,Rm 

MSR SPSR_flg,Rm 

MSR SPSR_flg,#0xC0000000 
MRS Rd,SPSR 
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’ 


’ 


’ 


CPSR[81:28] <- Rm[31:28] 

CPSR[31 :28] <- Rm[31:28] 

CPSR[31:28] <- OxA (set N,C; clear Z,V) 
Rd[31:0] <- CPSR[31:0] 


CPSR[81:0] <- Rm[31:0] 

CPSR[31 :28] <- Rm[31:28] 

CPSR[31:28] <- 0x5 (set Z,V; clear N,C) 
SPSR_<mode>[31:0]<- Rm[31:0] 
SPSR_<mode>[31 :28] <- Rm[31:28] 
SPSR_<mode>[31:28] <- OxC (set N,Z; clear C,V) 
Rad[31:0] <- SPSR_<mode>[31 :0] 


ARM INSTRUCTION SET S3C2410A 


MULTIPLY AND MULTIPLY-ACCUMULATE (MUL, MLA) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-12. 


The multiply and multiply-accumulate instructions use an 8-bit Booth's algorithm to perform integer multiplication. 


28 27 22 21 2019 1615 12 11 


PT CY CT 


[15:12][11:8][3:0] Operand Registers 
[19:16] Destination Register 


[20] Set Condition Code 
0 = Do not after condition codes 
1 = Set condition codes 


[21] Accumulate 
0 = Multiply only 
1 = Multiply and accumulate 


[31:28] Condition Field 


Figure 3-12. Multiply Instructions 


The multiply form of the instruction gives Rd:=Rm*Rs. Rn is ignored, and should be set to zero for compatibility with 
possible future upgrades to the instruction set. The multiply-accumulate form gives Rd:=Rm*Rs+Rn, which can save 
an explicit ADD instruction in some circumstances. Both forms of the instruction work on operands which may be 
considered as signed (2's complement) or unsigned integers. 


The results of a signed multiply and of an unsigned multiply of 32-bit operands differ only in the upper 32 bits - the 
low 32 bits of the signed and unsigned results are identical. As these instructions only produce the low 32 bits of a 
multiply, they can be used for both signed and unsigned multiplies. 


For example consider the multiplication of the operands: 
Operand A Operand B Result 
OxFFFFFFF6 O0x0000001 OxFFFFFF38 
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If the Operands Are Interpreted as Signed 

Operand A has the value -10, operand B has the value 20, and the result is -200 which is correctly represented as 
OxFFFFFF38. 

If the Operands Are Interpreted as Unsigned 


Operand A has the value 4294967286, operand B has the value 20 and the result is 85899345720, which is 
represented as 0x13FFFFFF38, so the least significant 32 bits are OxFFFFFF38. 


Operand Restrictions 


The destination register Rd must not be the same as the operand register Rm. R15 must not be used as an operand 
or as the destination register. 


All other register combinations will give correct results, and Rd, Rn and Rs may use the same register when 
required. 
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CPSR FLAGS 


Setting the CPSR flags is optional, and is controlled by the S bit in the instruction. The N (Negative) and Z (Zero) 
flags are set correctly on the result (N is made equal to bit 31 of the result, and Z is set if and only if the result is 
zero). The C (Carry) flag is set to a meaningless value and the V (oVerflow) flag is unaffected. 


INSTRUCTION CYCLE TIMES 


MUL takes 1S + ml and MLA 1S + (m+1)I cycles to execute, where S and | are defined as sequential (S-cycle) and 
internal (l-cycle), respectively. 


m The number of 8-bit multiplier array cycles is required to complete the multiply, 
which is controlled by the value of the multiplier operand specified by Rs. Its 
possible values are as follows 


1 If bits [82:8] of the multiplier operand are all zero or all one. 
2 If bits [82:16] of the multiplier operand are all zero or all one. 
3 If bits [82:24] of the multiplier operand are all zero or all one. 
4 In all other cases. 

ASSEMBLER SYNTAX 


MUL{cond}{S} Rd,Rm,Rs 
MLA{cond}{S} Rd,Rm,Rs,Rn 


{cond} Two-character condition mnemonic. See Table 3-2.. 
{S} Set condition codes if S present 


Rd, Rm, Rs and Rn Expressions evaluating to a register number other than R15. 
EXAMPLES 


MUL R1,R2,R3 ; Rt:=R2*R3 
MLAEQS R1,R2,R3,R4 ; Conditionally R1:=R2*R3+R4, Setting condition codes. 
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MULTIPLY LONG AND MULTIPLY-ACCUMULATE LONG (MULL, MLAL) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-13. 


The multiply long instructions perform integer multiplication on two 32-bit operands and produce 64-bit results. 
Signed and unsigned multiplication each with optional accumulate give rise to four variations. 


31 28 27 23 22 21 20 19 1615 12 11 


Pome [ooo Poles] aan [mae [me [roon] me 


[11:8][3:0] Operand Registers 
[19:16][15:12] Source Destination Registers 


[20] Set Condition Code 
0 = Do not alter condition codes 
1 = Set condition codes 


[21] Accumulate 
0 = Multiply only 
1 = Multiply and accumulate 


[22] Unsigned 
0 = Unsigned 
1 = Signed 


[31:28] Condition Field 


Figure 3-13. Multiply Long Instructions 


The multiply forms (UMULL and SMULL) take two 32-bit numbers and multiply them to produce a 64-bit result of the 
form RdHi,RdLo := Rm * Rs. The lower 32 bits of the 64-bit result are written to RdLo, the upper 32 bits of the result 
are written to RdHi. 


The multiply-accumulate forms (UMLAL and SMLAL) take two 32-bit numbers, multiply them and add a 64 bit 
number to produce a 64-bit result of the form RdHi,RdLo := Rm * Rs + RdHi,RdLo. The lower 32 bits of the 64-bit 
number to add is read from RdLo. The upper 32 bits of the 64 bit number to add is read from RdHi. The lower 32 bits 
of the 64-bit result are written to RdLo. The upper 32 bits of the 64 bit result are written to RdHi. 


The UMULL and UMLAL instructions treat all of their operands as unsigned binary numbers and write an unsigned 64 
bit result. The SMULL and SMLAL instructions treat all of their operands as two's-complement signed numbers and 
write a two's-complement signed 64-bit result. 
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OPERAND RESTRICTIONS 


e R15 must not be used as an operand or as a destination register. 


e RdHi, RdLo, and Rm must all specify different registers. 


CPSR FLAGS 


Setting the CPSR flags is optional, and is controlled by the S bit in the instruction. The N and Z flags are set 
correctly on the result (N is equal to bit 63 of the result, Z is set if and only if all 64 bits of the result are zero). Both 
the C and V flags are set to meaningless values. 


INSTRUCTION CYCLE TIMES 


MULL takes 1S + (m+1)l and MLAL 1S + (m+2)I cycles to execute, where m is the number of 8 bit multiplier array 
cycles required to complete the multiply, which is controlled by the value of the multiplier operand specified by Rs. 


Its possible values are as follows: 


For Signed INSTRUCTIONS SMULL, SMLAL: 

e — If bits [31:8] of the multiplier operand are all zero or all one. 
e — If bits [31:16] of the multiplier operand are all zero or all one. 
e — If bits [31:24] of the multiplier operand are all zero or all one. 


e = In all other cases. 


For Unsigned Instructions UMULL, UMLAL: 

e — If bits [31:8] of the multiplier operand are all zero. 
e — If bits [31:16] of the multiplier operand are all zero. 
e — If bits [31:24] of the multiplier operand are all zero. 


e = In all other cases. 


S and | are defined as sequential (S-cycle) and internal (I-cycle), respectively. 
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ASSEMBLER SYNTAX 


Table 3-5. Assembler Syntax Descriptions 


[__Wnemonic——=«di~S~*~*~«serption——=SCS*dtCSC*«é eC 
UMULL{cond}{S} RdLo,RdHi,Rm,Rs Unsigned Multiply Long 32 x 32 = 64 


UMLAL{cond}{S} RdLo,RdHi,Rm,Rs Unsigned Multiply & Accumulate Long 32 x 32 + 64 = 64 
SMULL{cond}{S} RdLo,RdHi,Rm,Rs Signed Multiply Long 32 x 32 = 64 
SMLAL{cond}{S} RdLo,RdHi,Rm,Rs Signed Multiply & Accumulate Long 32 x 32 + 64 = 64 


where: 
{cond} Two-character condition mnemonic. See Table 3-2. 
{S} Set condition codes if S present 
RdLo, RdHi, Rm, Rs Expressions evaluating to a register number other than R15. 
EXAMPLES 
UMULL R1,R4,R2,R3 ; R4,R1:=R2*R3 
UMLALS R1,R5,R2,R3 ; R5,R1:=R2*R3+R5,R1 also setting condition codes 
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SINGLE DATA TRANSFER (LDR, STR) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-14. 


The single data transfer instructions are used to load or store single bytes or words of data. The memory address 
used in the transfer is calculated by adding an offset to or subtracting an offset from a base register. 


The result of this calculation may be written back into the base register if auto-indexing is required. 


28 27 26 25 24 23 22 21 20 19 1615 12 11 0 


ee 0 


[15:12] Source/Destination Registers 
[19:16] Base Register 


[20] Load/Store Bit 
0 = Store to memory 
1 = Load from memory 


[21] Write-back Bit 
0 = No write-back 
1 = Write address into base 


[22] Byte/Word Bit 
0 = Transfer word quantity 
1 = Transfer byte quantity 


[23] Up/Down Bit 
0 = Down: subtract offset from base 
1 = Up: add offset to base 


[24] Pre/Post Indexing Bit 
0 = Post: add offset after transfer 
1 = Pre: add offset before transfer 


[25] Immediate Offset 
0 = Offset is an immediate value 


[11:0] Offset 
11 0 


[11:0] Unsigned 12-bit immediate offset 
11 4 3 0 


[3:0] Offset register [11:4] Shift applied to Rm 


[31:28] Condition Field 


Figure 3-14. Single Data Transfer Instructions 
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OFFSETS AND AUTO-INDEXING 


The offset from the base may be either a 12-bit unsigned binary immediate value in the instruction, or a second 
register (possibly shifted in some way). The offset may be added to (U = 1) or subtracted from (U = 0) the base 
register Rn. The offset modification may be performed either before (pre-indexed, P = 1) or after (post-indexed, P = 0) 
the base is used as the transfer address. 


The W bit gives optional auto increment and decrement addressing modes. The modified base value may be written 
back into the base (W = 1), or the old base value may be kept (W = 0). In the case of post-indexed addressing, the 
write back bit is redundant and is always set to zero, since the old base value can be retained by setting the offset to 
zero. Therefore post-indexed data transfers always write back the modified base. The only use of the W bit in a post- 
indexed data transfer is in privileged mode code, where setting the W bit forces non-privileged mode for the transfer, 
allowing the operating system to generate a user address in a system where the memory management hardware 
makes suitable use of this hardware. 


SHIFTED REGISTER OFFSET 


The 8 shift control bits are described in the data processing instructions section. However, the register specified shift 
amounts are not available in this instruction class. See Figure 3-5. 


BYTES AND WORDS 


This instruction class may be used to transfer a byte (B = 1) or a word (B = 0) between an ARM920T register and 
memory. 


The action of LDR(B) and STR(B) instructions is influenced by the BIGEND control signal of ARM920T core. The two 
possible configurations are described below. 


Little-Endian Configuration 


A byte load (LDRB) expects the data on data bus inputs 7 through 0 if the supplied address is on a word boundary, 
on data bus inputs 15 through 8 if it is a word address plus one byte, and so on. The selected byte is placed in the 
bottom 8 bits of the destination register, and the remaining bits of the register are filled with zeros. Please see Figure 
2-2. 


A byte store (STRB) repeats the bottom 8 bits of the source register four times across data bus outputs 31 through 
0. The external memory system should activate the appropriate byte subsystem to store the data. 


A word load (LDR) will normally use a word aligned address. However, an address offset from a word boundary will 
cause the data to be rotated into the register so that the addressed byte occupies bits 0 to 7. This means that half- 
words accessed at offsets 0 and 2 from the word boundary will be correctly loaded into bits 0 through 15 of the 
register. Two shift operations are then required to clear or to sign extend the upper 16 bits. 


A word store (STR) should generate a word aligned address. The word presented to the data bus is not affected if the 
address is not word aligned. That is, bit 31 of the register being stored always appears on data bus output 31. 
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memory register 


LDR from word aligned address 


memory register 


A+3 
A+2 
A+1 


LDR from address offset by 2 


Figure 3-15. Little-Endian Offset Addressing 


Big-Endian Configuration 


A byte load (LDRB) expects the data on data bus inputs 31 through 24 if the supplied address is on a word 
boundary, on data bus inputs 23 through 16 if it is a word address plus one byte, and so on. The selected byte is 
placed in the bottom 8 bits of the destination register and the remaining bits of the register are filled with zeros. 
Please see Figure 2-1. 


A byte store (STRB) repeats the bottom 8 bits of the source register four times across data bus outputs 31 through 
0. The external memory system should activate the appropriate byte subsystem to store the data. 


A word load (LDR) should generate a word aligned address. An address offset of 0 or 2 from a word boundary will 
cause the data to be rotated into the register so that the addressed byte occupies bits 31 through 24. This means 
that half-words accessed at these offsets will be correctly loaded into bits 16 through 31 of the register. A shift 
operation is then required to move (and optionally sign extend) the data into the bottom 16 bits. An address offset of 
1 or 3 from a word boundary will cause the data to be rotated into the register so that the addressed byte occupies 
bits 15 through 8. 


A word store (STR) should generate a word aligned address. The word presented to the data bus is not affected if the 
address is not word aligned. That is, bit 31 of the register being stored always appears on data bus output 31. 
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USE OF R15 


Write-back must not be specified if R15 is specified as the base register (Rn). When using R15 as the base register 
you must remember it contains an address 8 bytes on from the address of the current instruction. 


R15 must not be specified as the register offset (Rm). 


When R15 is the source register (Rd) of a register store (STR) instruction, the stored value will be address of the 
instruction plus 12. 


Restriction on the use of base register 


When configured for late aborts, the following example code is difficult to unwind as the base register, Rn, gets 
updated before the abort handler starts. Sometimes it may be impossible to calculate the initial value. 


After an abort, the following example code is difficult to unwind as the base register, Rn, gets updated before the 
abort handler starts. Sometimes it may be impossible to calculate the initial value. 
EXAMPLE: 

LDR RO,[R1],R1 


Therefore a post-indexed LDR or STR where Rm is the same register as Rn should not be used. 


DATA ABORTS 


A transfer to or from a legal address may cause problems for a memory management system. For instance, in a 
system which uses virtual memory the required data may be absent from main memory. The memory manager can 
signal a problem by taking the processor ABORT input HIGH whereupon the Data Abort trap will be taken. It is up to 
the system software to resolve the cause of the problem, then the instruction can be restarted and the original 
program continued. 


INSTRUCTION CYCLE TIMES 


Normal LDR instructions take 1S + 1N + 11 and LDR PC take 2S + 2N +11 incremental cycles, where S,N and | are 
defined as sequential (S-cycle), non-sequential (N-cycle), and internal (I-cycle), respectively. STR instructions take 
2N incremental cycles to execute. 
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ASSEMBLER SYNTAX 
<LDR|STR>{cond}{B}{T} Rd,<Address> 


where: 

LDR Load from memory into a register 

STR Store from a register into memory 

{cond} Two-character condition mnemonic. See Table 3-2. 

{B} If B is present then byte transfer, otherwise word transfer 

{T} If T is present the W bit will be set in a post-indexed instruction, forcing non- 
privileged mode for the transfer cycle. T is not allowed when a pre-indexed 
addressing mode is specified or implied. 

Rd An expression evaluating to a valid register number. 

Rn and Rm Expressions evaluating to a register number. If Rn is R15 then the assembler will 


subtract 8 from the offset value to allow for ARM920T pipelining. In this case base write- 
back should not be specified. 


<Address>can be: 


1 An expression which generates an address: 
The assembler will attempt to generate an instruction using the PC as a base anda 
corrected immediate offset to address the location given by evaluating the expression. 
This will be a PC relative, pre-indexed address. If the address is out of range, an error 
will be generated. 


2 A pre-indexed addressing specification: 
[Rn] offset of zero 
[Rn,<#expression>]{!} offset of <expression> bytes 
[Rn,{+/-}Rm{,<shift>}]{!} offset of +/- contents of index register, shifted 
by <shift> 
3 A post-indexed addressing specification: 
[Rn],<#expression> offset of <expression> bytes 
[Rn],{+/-}Rm{,<shift>} offset of +/- contents of index register, shifted as 
by <shift>. 
<shift> General shift operation (see data processing instructions) but you cannot specify the shift 
amount by a register. 
{} Writes back the base register (set the W bit) if! is present. 
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EXAMPLES 
STR 


STR 
LDR 
LDR 
LDREQB 


STR 
PLACE 


ELECTRONICS 


R1,[R2,R4]! 


R1,[R2],R4 
R1,[R2,#16] 
R1,[R2,R3,LSL#2] 
R1,[R6,#5] 


R1,PLACE 


ARM INSTRUCTION SET 


Store R1 at R2+R4 (both of which are registers) 

and write back address to R2. 

Store R1 at R2 and write back R2+R4 to R2. 

Load R1 from contents of R2+16, but don't write back. 
Load R1 from contents of R2+R3*4. 

Conditionally load byte at R6+5 into 

R1 bits 0 to 7, filling bits 8 to 31 with zeros. 

Generate PC relative offset to address PLACE. 
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HALFWORD AND SIGNED DATA TRANSFER (LDRH/STRH/LDRSB/LDRSh) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-16. 


These instructions are used to load or store half-words of data and also load sign-extended bytes or half-words of 
data. The memory address used in the transfer is calculated by adding an offset to or subtracting an offset from a 
base register. The result of this calculation may be written back into the base register if auto-indexing is required. 


31 28 27 = 25 24 23 22 21 20 19 1615 12 11 8765 4 3 


Too] oe Delupopoe] me [me ome Ds 


[3:0] Offset Register 


[6][5] S H 

0 0 = SWP instruction 

0 1 =Unsigned halfword 
1 1= Signed byte 

1 1 = Signed halfword 


[15:12] Source/Destination Register 
[19:16] Base Register 


[20] Load/Store 
0 = Store to memory 
1 = Load from memory 


[21] Write-back 
0 = No write-back 
1 = Write address into base 


[23] Up/Down 
0 = Down: subtract offset from base 
1 = Up: add offset to base 


[24] Pre/Post Indexing 
0 = Post: add/subtract offset after transfer 
1 = Pre: add/subtract offset bofore transfer 


[31:28] Condition Field 


Figure 3-16. Halfword and Signed Data Transfer with Register Offset 
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28 27 =—25 24 23 22 21 20 19 1615 12 11 8765 4 3 


[3:0] Immediate Offset (Low Nibble) 


[6][5] S H 

0 0 = SWP instruction 

0 1 = Unsigned halfword 
1 1=Signed byte 

1 1 = Signed halfword 


[11:8] Immediate Offset (High Nibble) 
[15:12] Source/Destination Register 
[19:16] Base Register 

[20] Load/Store 

0 = Store to memory 

1 = Load from memory 

[21] Write-back 


0 = No write-back 
1 = Write address into base 


[23] Up/Down 
0 = Down: subtract offset from base 
1 = Up: add offset to base 


[24] Pre/Post Indexing 
0 = Post: add/subtract offset after transfer 
1 = Pre: add/subtract offset bofore transfer 


[31:28] Condition Field 


Figure 3-17. Halfword and Signed Data Transfer with Immediate Offset and Auto-Indexing 


OFFSETS AND AUTO-INDEXING 


The offset from the base may be either a 8-bit unsigned binary immediate value in the instruction, or a second 
register. The 8-bit offset is formed by concatenating bits 11 to 8 and bits 3 to 0 of the instruction word, such that bit 
11 becomes the MSB and bit 0 becomes the LSB. The offset may be added to (U = 1) or subtracted from (U = 0) the 
base register Rn. The offset modification may be performed either before (pre-indexed, P = 1) or after (post-indexed, 
P = 0) the base register is used as the transfer address. 


The W bit gives optional auto-increment and decrement addressing modes. The modified base value may be written 
back into the base (W = 1), or the old base may be kept (W = 0). In the case of post-indexed addressing, the write 
back bit is redundant and is always set to zero, since the old base value can be retained if necessary by setting the 
offset to zero. Therefore post-indexed data transfers always write back the modified base. 


The Write-back bit should not be set high (W = 1) when post-indexed addressing is selected. 
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HALFWORD LOAD AND STORES 
Setting S=0 and H=1 may be used to transfer unsigned Half-words between an ARM920T register and memory. 


The action of LDRH and STRH instructions is influenced by the BIGEND control signal. The two possible 
configurations are described in the section below. 


Signed byte and halfword loads 


The S bit controls the loading of sign-extended data. When S = 1 the H bit selects between Bytes (H=0) and Half- 
words (H = 1). The L bit should not be set low (Store) when Signed (S = 1) operations have been selected. 


The LDRSB instruction loads the selected Byte into bits 7 to 0 of the destination register and bits 31 to 8 of the 
destination register are set to the value of bit 7, the sign bit. 


The LDRSH instruction loads the selected Half-word into bits 15 to 0 of the destination register and bits 31 to 16 of 
the destination register are set to the value of bit 15, the sign bit. 


The action of the LDRSB and LDRSH instructions is influenced by the BIGEND control signal. The two possible 
configurations are described in the following section. 


Endianness and byte/halfword selection 


Little-Endian Configuration 


A signed byte load (_.DRSB) expects data on data bus inputs 7 through to 0 if the supplied address is on a word 
boundary, on data bus inputs 15 through to 8 if it is a word address plus one byte, and so on. The selected byte is 
placed in the bottom 8 bit of the destination register, and the remaining bits of the register are filled with the sign bit, 
bit 7 of the byte. Please see Figure 2-2. 


A halfword load (L.DRSH or LDRH) expects data on data bus inputs 15 through to 0 if the supplied address is ona 
word boundary and on data bus inputs 31 through to 16 if it is a halfword boundary, (A[1] = 1). The supplied address 
should always be on a halfword boundary. If bit O of the supplied address is HIGH then the ARM920T will load an 
unpredictable value. The selected halfword is placed in the bottom 16 bits of the destination register. For unsigned 
half-words (LDRH), the top 16 bits of the register are filled with zeros and for signed half-words (LDRSH) the top 16 
bits are filled with the sign bit, bit 15 of the halfword. 


A halfword store (STRH) repeats the bottom 16 bits of the source register twice across the data bus outputs 31 
through to 0. The external memory system should activate the appropriate halfword subsystem to store the data. 
Note that the address must be halfword aligned, if bit 0 of the address is HIGH this will cause unpredictable 
behaviour. 
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Big-Endian Configuration 


A signed byte load (_.DRSB) expects data on data bus inputs 31 through to 24 if the supplied address is on a word 
boundary, on data bus inputs 23 through to 16 if it is a word address plus one byte, and so on. The selected byte is 
placed in the bottom 8 bit of the destination register, and the remaining bits of the register are filled with the sign bit, 
bit 7 of the byte. Please see Figure 2-1. 


A halfword load (L.DRSH or LDRH) expects data on data bus inputs 31 through to 16 if the supplied address is ona 
word boundary and on data bus inputs 15 through to 0 if it is a halfword boundary, (A[1]=1). The supplied address 
should always be on a halfword boundary. If bit 0 of the supplied address is HIGH then the ARM920T will load an 
unpredictable value. The selected halfword is placed in the bottom 16 bits of the destination register. For unsigned 
half-words (LDRH), the top 16 bits of the register are filled with zeros and for signed half-words (LDRSH) the top 16 
bits are filled with the sign bit, bit 15 of the halfword. 


A halfword store (STRH) repeats the bottom 16 bits of the source register twice across the data bus outputs 31 
through to 0. The external memory system should activate the appropriate halfword subsystem to store the data. 
Note that the address must be halfword aligned, if bit 0 of the address is HIGH this will cause unpredictable 
behaviour. 


USE OF R15 


Write-back should not be specified if R15 is specified as the base register (Rn). When using R15 as the base 
register you must remember it contains an address 8 bytes on from the address of the current instruction. 


R15 should not be specified as the register offset (Rm). 

When R15 is the source register (Rd) of a Half-word store (STRH) instruction, the stored address will be address of 
the instruction plus 12. 

DATA ABORTS 


A transfer to or from a legal address may cause problems for a memory management system. For instance, in a 
system which uses virtual memory the required data may be absent from the main memory. The memory manager 
can signal a problem by taking the processor ABORT input HIGH whereupon the Data Abort trap will be taken. It is 
up to the system software to resolve the cause of the problem, then the instruction can be restarted and the original 
program continued. 


INSTRUCTION CYCLE TIMES 


Normal LDR(H,SH,SB) instructions take 1S + 1N + 11. LDR(H,SH,SB) PC take 2S + 2N + 11 incremental cycles. 
S,N and | are defined as sequential (S-cycle), non-sequential (N-cycle), and internal (I-cycle), respectively. STRH 
instructions take 2N incremental cycles to execute. 
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ASSEMBLER SYNTAX 
<LDR|STR>{cond}<H|SH|SB> Rd,<address> 


LDR Load from memory into a register 

STR Store from a register into memory 

{cond} Two-character condition mnemonic. See Table 3-2.. 
H Transfer halfword quantity 

SB Load sign extended byte (Only valid for LDR) 

SH Load sign extended halfword (Only valid for LDR) 
Rd An expression evaluating to a valid register number. 


<address> can be: 


1 An expression which generates an address: 
The assembler will attempt to generate an instruction using the PC as a base anda 
corrected immediate offset to address the location given by evaluating the expression. 
This will be a PC relative, pre-indexed address. If the address is out of range, an error will 
be generated. 


2 A pre-indexed addressing specification: 
[Rn] offset of zero 
[Rn,<#expression>]{!} offset of <expression> bytes 
[Rn,{+/-}Rm]{!} offset of +/- contents of index register 
3 A post-indexed addressing specification: 
[Rn],<#expression> offset of <expression> bytes 
[Rn],{+/-}Rm offset of +/- contents of index register. 
4 Rn and Rm are expressions evaluating to a register number. If Rn is R15 then the 


assembler will subtract 8 from the offset value to allow for ARM920T pipelining. In this 
case base write-back should not be specified. 


{} Writes back the base register (set the W bit) if ! is present. 
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EXAMPLES 


LDRH 
STRH 
LDRSB 
LDRNESH 
HERE 


STRH 
FRED 


ELECTRONICS 


R1,[R2,-R3]! 


R3,[R4,#14] 
R8,[R2],#-223 


R11,[RO0] 


R5,[PC,#(FRED-HERE-8)] ; 


’ 


ARM INSTRUCTION SET 


Load R1 from the contents of the halfword address 
contained in R2-R3 (both of which are registers) 

and write back address to R2 

Store the halfword in R3 at R14+14 but don't write back. 
Load R8 with the sign extended contents of the byte 
address contained in R2 and write back R2-223 to R2. 
Conditionally load R11 with the sign extended contents 
of the halfword address contained in RO. 

Generate PC relative offset to address FRED. 

Store the halfword in R5 at address FRED 
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BLOCK DATA TRANSFER (LDM, STM) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-18. 


Block data transfer instructions are used to load (LDM) or store (STM) any subset of the currently visible registers. 
They support all possible stacking modes, maintaining full or empty stacks which can grow up or down memory, and 
are very efficient instructions for saving or restoring context, or for moving large blocks of data around main memory. 


THE REGISTER LIST 


The instruction can cause the transfer of any registers in the current bank (and non-user mode programs can also 
transfer to and from the user bank, see below). The register list is a 16-bit field in the instruction, with each bit 
corresponding to a register. A 1 in bit 0 of the register field will cause RO to be transferred, a 0 will cause it not to be 
transferred; similarly bit 1 controls the transfer of R1, and so on. 


Any subset of the registers, or all the registers, may be specified. The only restriction is that the register list should 
not be empty. 


Whenever R15 is stored to memory the stored value is the address of the STM instruction plus 12. 


31 2827 ~=—25 24 23 22 21 20 19 1615 0 


| cond | soo JPjufsjwje] orn | Registertist_ 


[19:16] Base Register 


[20] Load/Store Bit 
0 = Store to memory 
1 = Load from memory 


[21] Write-back Bit 
0 = No write-back 
1 = Write address into base 


[22] PSR & Force User Bit 
0 = Do not load PSR or user mode 
1 = Load PSR or force user mode 


[23] Up/Down Bit 
0 = Down: subtract offset from base 
1 = Up: add offset to base 


[24] Pre/Post Indexing Bit 
0 = Post: add offset after transfer 
1 = Pre: add offset bofore transfer 


[31:28] Condition Field 


Figure 3-18. Block Data Transfer Instructions 
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ADDRESSING MODES 


The transfer addresses are determined by the contents of the base register (Rn), the pre/post bit (P) and the up/ 
down bit (U). The registers are transferred in the order lowest to highest, so R15 (if in the list) will always be 
transferred last. The lowest register also gets transferred to/from the lowest memory address. By way of illustration, 
consider the transfer of R1, R5 and R7 in the case where Rn = 0x1000 and write back of the modified base is 
required (W = 1). Figure 3.19-22 show the sequence of register transfers, the addresses used, and the value of Rn 
after the instruction has completed. 


In all cases, had write back of the modified base not been required (W = 0), Rn would have retained its initial value of 
0x1000 unless it was also in the transfer list of a load multiple register instruction, when it would have been 
overwritten with the loaded value. 


ADDRESS ALIGNMENT 


The address should normally be a word aligned quantity and non-word aligned addresses do not affect the 
instruction. However, the bottom 2 bits of the address will appear on A[1:0] and might be interpreted by the memory 
system. 


0x100C 0x100C 
0x1000 0x1000 


Ox0FF4 OxOFF4 
1 


| s«d x06 RN 0x100C 


R5 


0x1000 0x1000 


OxOFF4 OxOFF4 


Figure 3-19. Post-Increment Addressing 


ELECTRONICS 3-41 


ARM INSTRUCTION SET S3C2410A 


0x100C 0x100C 
0x1000 0x1000 
OxOFF4 


0x100C Rn —-> 0x100C 


o 


0x1000 


OxOFF4 


Bs) 
=) 
v 


0x100C 0x100C 


0x1000 0x1000 


OxOFF4 


0x100C 


5 


2 

ox1000 

OxOFF4 Rn—>| |“ OXOFF4 
4 


= 
1 
3 


Figure 3-21. Post-Decrement Addressing 
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0x100C 0x100C 
0x1000 0x1000 


OxOFF4 OxOFF4 
1 


| ss xt 006 0x100C 


0x1000 0x1000 


Ox0FF4 Ox0FF4 


Figure 3-22. Pre-Decrement Addressing 


USE OF THE S BIT 


When the §S bit is set in a LDM/STM instruction its meaning depends on whether or not R15 is in the transfer list and 
on the type of instruction. The S bit should only be set if the instruction is to execute in a privileged mode. 


LDM with R15 in Transfer List and S Bit Set (Mode Changes) 


If the instruction is a_LDM then SPSR_<mode> is transferred to CPSR at the same time as R15 is loaded. 


STM with R15 in Transfer List and S Bit Set (User Bank Transfer) 


The registers transferred are taken from the User bank rather than the bank corresponding to the current mode. This 
is useful for saving the user state on process switches. Base write-back should not be used when this mechanism is 
employed. 


R15 not in List and S Bit Set (User Bank Transfer) 


For both LDM and STM instructions, the User bank registers are transferred rather than the register bank 
corresponding to the current mode. This is useful for saving the user state on process switches. Base write-back 
should not be used when this mechanism is employed. 


When the instruction is LDM, care must be taken not to read from a banked register during the following cycle 
(inserting a dummy instruction such as MOV RO, RO after the LDM will ensure safety). 


USE OF R15 AS THE BASE 


R15 should not be used as the base register in any LDM or STM instruction. 
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INCLUSION OF THE BASE IN THE REGISTER LIST 


When write-back is specified, the base is written back at the end of the second cycle of the instruction. During a 
STM, the first register is written out at the start of the second cycle. A STM which includes storing the base, with the 
base as the first register to be stored, will therefore store the unchanged value, whereas with the base second or 
later in the transfer order, will store the modified value. A LDM will always overwrite the updated base if the base is in 
the list. 


DATA ABORTS 


Some legal addresses may be unacceptable to a memory management system, and the memory manager can 
indicate a problem with an address by taking the ABORT signal HIGH. This can happen on any transfer during a 
multiple register load or store, and must be recoverable if ARM920T is to be used in a virtual memory system. 


Abort during STM Instructions 


If the abort occurs during a store multiple instruction, ARM920T takes little action until the instruction completes, 
whereupon it enters the data abort trap. The memory manager is responsible for preventing erroneous writes to the 
memory. The only change to the internal state of the processor will be the modification of the base register if write- 
back was specified, and this must be reversed by software (and the cause of the abort resolved) before the 
instruction may be retried. 


Aborts during LDM Instructions 

When ARM920T detects a data abort during a load multiple instruction, it modifies the operation of the instruction to 

ensure that recovery is possible. 

e Overwriting of registers stops when the abort happens. The aborting load will not take place but earlier ones may 
have overwritten registers. The PC is always the last register to be written and so will always be preserved. 


e The base register is restored, to its modified value if write-back was requested. This ensures recoverability in the 
case where the base register is also in the transfer list, and may have been overwritten before the abort occurred. 


The data abort trap is taken when the load multiple has completed, and the system software must undo any base 
modification (and resolve the cause of the abort) before restarting the instruction. 


INSTRUCTION CYCLE TIMES 
Normal LDM instructions take nS + 1N + 11 and LDM PC takes (n+1)S + 2N + 11 incremental cycles, where S,N and 


| are defined as sequential (S-cycle), non-sequential (N-cycle), and internal (l-cycle), respectively. STM instructions 
take (n-1)S + 2N incremental cycles to execute, where nis the number of words transferred. 
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ASSEMBLER SYNTAX 


<LDM|STM>{cond}<FD|ED|FA|EA|IA|IB|IDA|DB> Rn{!},<Rlist>{"} 


where: 

{cond} Two character condition mnemonic. See Table 3-2. 

Rn An expression evaluating to a valid register number 

<Rlist> A list of registers and register ranges enclosed in {} (e.g. {RO,R2-R7,R10}). 

{} If present requests write-back (W = 1), otherwise W = 0. 

{4} If present set S bit to load the CPSR along with the PC, or force transfer of user bank 


when in privileged mode. 


Addressing Mode Names 


There are different assembler mnemonics for each of the addressing modes, depending on whether the instruction is 
being used to support stacks or for other purposes. The equivalence between the names and the values of the bits in 
the instruction are shown in the following table 3-6. 


Table 3-6. Addressing Mode Names 


[wame «dS Stack «ther «Tt | Pen | ue 
PostineementLeed | LoMFD_| wa | + | 0 | 1 _| 
[PreDevementicad | L0MEA_| _towoa_| + | 1 | 0 | 


[PostDecrement oad | LbMFa [compa | + | 0 | 0 
[Presnaremen store | __stwra | swe [ 0 | 1 | 4 
ostinement store | _sTwea | sia | _o | 0 | 4 __ 
[PreDecrementsioe | _stwro_| sma | _o | 1 | 0 
[PostDecrement soe | _stweo | stmoa_| 0 | 0 | 0 


FD, ED, FA, EA define pre/post indexing and the up/down bit by reference to the form of stack required. The F and E 
refer to a "full" or "empty" stack, i.e. whether a pre-index has to be done (full) before storing to the stack. The A and 
D refer to whether the stack is ascending or descending. If ascending, a STM will go up and LDM down, if 
descending, vice-versa. 


IA, IB, DA, DB allow control when LDM/STM are not being used for stacks and simply mean Increment After, 
Increment Before, Decrement After, Decrement Before. 
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EXAMPLES 


LDMFD SPI,{RO,R1,R2} 
STMIA RO,{RO-R15} 
LDMFD SPI,{R15} 
LDMFD SPI,{R15}" 


STMFD R13,{RO-R14} 


S3C2410A 


Unstack 3 registers. 

Save all registers. 

R15 < (SP), CPSR unchanged. 
R15 < (SP), CPSR <- SPSR_mode 
(allowed only in privileged modes). 
Save user mode regs on stack 
(allowed only in privileged modes). 


These instructions may be used to save state on subroutine entry, and restore it efficiently on return to the calling 


routine: 


STMED SP!,{RO-R3,R14} 


BL somewhere 
LDMED SP!,{RO-R3,R15} 


3-46 


Save RO to R3 to use as workspace 
and R14 for returning. 

This nested call will overwrite R14 
Restore workspace and return. 
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SINGLE DATA SWAP (SWP) 


28 27 23 22 21 2019 1615 12 11 


a OY 


[3:0] Source Register 
[15:12] Destination Register 


[19:16] Base Register 


[22] Byte/Word Bit 
0 = Swap word quantity 
1 = Swap word quantity 


[31:28] Condition Field 


Figure 3-23. Swap Instruction 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-23. 


The data swap instruction is used to swap a byte or word quantity between a register and external memory. This 
instruction is implemented as a memory read followed by a memory write which are "locked" together (the processor 
cannot be interrupted until both operations have completed, and the memory manager is warned to treat them as 
inseparable). This class of instruction is particularly useful for implementing software semaphores. 


The swap address is determined by the contents of the base register (Rn). The processor first reads the contents of 
the swap address. Then it writes the contents of the source register (Rm) to the swap address, and stores the old 
memory contents in the destination register (Rd). The same register may be specified as both the source and 
destination. 


The LOCK output goes HIGH for the duration of the read and write operations to signal to the external memory 
manager that they are locked together, and should be allowed to complete without interruption. This is important in 
multi-processor systems where the swap instruction is the only indivisible instruction which may be used to 
implement semaphores; control of the memory must not be removed from a processor while it is performing a locked 
operation. 


BYTES AND WORDS 


This instruction class may be used to swap a byte (B = 1) or a word (B = 0) between an ARM920T register and 
memory. The SWP instruction is implemented as a LDR followed by a STR and the action of these is as described 
in the section on single data transfers. In particular, the description of Big and Little Endian configuration applies to 
the SWP instruction. 


ELECTRONICS 3-47 


ARM INSTRUCTION SET 


USE OF R15 


Do not use R15 as an operand (Rd, Rn or Rs) in a SWP instruction. 


DATA ABORTS 


S3C2410A 


If the address used for the swap is unacceptable to a memory management system, the memory manager can flag 
the problem by driving ABORT HIGH. This can happen on either the read or the write cycle (or both), and in either 

case, the Data Abort trap will be taken. It is up to the system software to resolve the cause of the problem, then the 
instruction can be restarted and the original program continued. 


INSTRUCTION CYCLE TIMES 


Swap instructions take 1S + 2N +11 incremental cycles to execute, where S,N and | are defined as sequential 
(S-cycle), non-sequential, and internal (I-cycle), respectively. 


ASSEMBLER SYNTAX 


<SWP>{cond}{B} Rd,Rm,[Rn] 


{cond} 
{B} 
Rd,Rm,Rn 


Examples 


3-48 


Two-character condition mnemonic. See Table 3-2. 
If B is present then byte transfer, otherwise word transfer 


Expressions evaluating to valid register numbers 


SWP RO,R1,[R2] ; Load RO with the word addressed by R2, and 
; store R1 at R2. 

SWPB R2,R3,[R4] ; Load R2 with the byte addressed by R4, and 
; store bits 0 to 7 of R3 at R4. 

SWPEQ RO,RO,[R1] ; Conditionally swap the contents of the 


; word addressed by R1 with RO. 
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SOFTWARE INTERRUPT (SWI) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-24, below. 


31 28 27 24 23 0 


| Cond | 1111 Comment Field (Ignored by Processor) 


[31:28] Condition Field 


Figure 3-24. Software Interrupt Instruction 


The software interrupt instruction is used to enter Supervisor mode in a controlled manner. The instruction causes 
the software interrupt trap to be taken, which effects the mode change. The PC is then forced to a fixed value (0x08) 
and the CPSR is saved in SPSR_sve. If the SWI vector address is suitably protected (by external memory 
management hardware) from modification by the user, a fully protected operating system may be constructed. 
RETURN FROM THE SUPERVISOR 


The PC is saved in R14_svc upon entering the software interrupt trap, with the PC adjusted to point to the word after 
the SWI instruction. MOVS PC,R14_sve will return to the calling program and restore the CPSR. 


Note that the link mechanism is not re-entrant, so if the supervisor code wishes to use software interrupts within 
itself it must first save a copy of the return address and SPSR. 
COMMENT FIELD 


The bottom 24 bits of the instruction are ignored by the processor, and may be used to communicate information to 
the supervisor code. For instance, the supervisor may look at this field and use it to index into an array of entry 
points for routines which perform the various supervisor functions. 


INSTRUCTION CYCLE TIMES 


Software interrupt instructions take 2S + 1N incremental cycles to execute, where S and N are defined as sequential 
(S-cycle) and non-sequential (N-cycle). 
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ASSEMBLER SYNTAX 


SWI{cond} <expression> 


{cond} Two character condition mnemonic, Table 3-2. 
<expression> Evaluated and placed in the comment field (which is ignored by ARM920T). 
Examples 

SWI ReadC ; Get next character from read stream. 

SWI Writel+"k” ; Output a"k" to the write stream. 

SWINE 0 ; Conditionally call supervisor with 0 in comment field. 


Supervisor code 


The previous examples assume that suitable supervisor code exists, for instance: 


0x08 B Supervisor ; SWI entry point 

EntryTable ; Addresses of supervisor routines 
DCD ZeroRtn 

DCD ReadCRin 

DCD WritelRtn 


Zero EQU 0 
ReadC EQU 256 
Writel EQU 512 
Supervisor ; SWI has routine required in bits 8-23 and data (if any) in 
; bits 0-7. Assumes R13_svc points to a suitable stack 
STMFD R13,{RO-R2,R14} ; Save work registers and return address. 
LDR RO,[R14,#-4] ; Get SWI instruction. 
BIC RO,RO,#0xFFOO0000 ; Clear top 8 bits. 
MOV R1,RO,LSR#8 ; Get routine offset. 
ADR R2,EntryTable ; Get start address of entry table. 
LDR R15,[R2,R1,LSL#2] ; Branch to appropriate routine. 
WritelRtn ; Enter with character in RO bits 0-7. 
LDMFD R13,{RO-R2,R15}* ; Restore workspace and return, 


; restoring processor mode and flags. 
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COPROCESSOR DATA OPERATIONS (CDP) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-25. 


This class of instruction is used to tell a coprocessor to perform some internal operation. No result is communicated 
back to ARM920T, and it will not wait for the operation to complete. The coprocessor could contain a queue of such 
instructions awaiting execution, and their execution can overlap other activity, allowing the coprocessor and 
ARM920T to perform independent tasks in parallel. 

COPROCESSOR INSTRUCTIONS 


The S3C2410A, unlike some other ARM-based processors, does not have an external coprocessor interface. It does 
not have a on-chip coprocessor also. 


So then all coprocessor instructions will cause the undefined instruction trap to be taken on the S3C2410A. These 
coprocessor instructions can be emulated by the undefined trap handler. Even though external coprocessor can not 


be connected to the S3C2410A, the coprocessor instructions are still described here in full for completeness. 
(Remember that any external coprocessor described in this section is a software emulation.) 


28 27 24 23 20 19 1615 12 11 7 5 4 3 


Doe [ne [oon [om | om | oe [| @ po] om 


[3:0] Coprocessor operand register 
[7:5] Coprocessor information 
[11:8] Coprocessor number 


[15:12] Coprocessor destination register 


[19:16] Coprocessor operand register 


[23:20] Coprocessor operation code 


[31:28] Condition Field 


Figure 3-25. Coprocessor Data Operation Instruction 


Only bit 4 and bits 24 to 31 The coprocessor fields are significant to ARM920T. The remaining bits are used by 
coprocessors. The above field names are used by convention, and particular coprocessors may redefine the use of 
all fields except CP# as appropriate. The CP# field is used to contain an identifying number (in the range 0 to 15) for 
each coprocessor, and a coprocessor will ignore any instruction which does not contain its number in the CP# field. 


The conventional interpretation of the instruction is that the coprocessor should perform an operation specified in the 
CP Opc field (and possibly in the CP field) on the contents of CRn and CRm, and place the result in CRd. 
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INSTRUCTION CYCLE TIMES 


Coprocessor data operations take 1S + bl incremental cycles to execute, where b is the number of cycles spent in 
the coprocessor busy-wait loop. 


S and | are defined as sequential (S-cycle) and internal (I-cycle). 
Assembler syntax 


CDP{conq} p#,<expression1>,cd,cn,cm{,<expression2>} 


{cond} Two character condition mnemonic. See Table 3-2. 
p# The unique number of the required coprocessor 
<expression1> Evaluated to a constant and placed in the CP Opc field 
cd, cn and cm Evaluate to the valid coprocessor register numbers CRd, CRn and CRm respectively 
<expression2> Where present is evaluated to a constant and placed in the CP field 
EXAMPLES 

CDP p1,10,c1,c2,c3 ; Request coproc 1 to do operation 10 

; on CR2 and CR, and put the result in CR1. 
CDPEQ p2,5,c1,c2,c3,2 ; If Z flag is set request coproc 2 to do operation 5 (type 2) 


; on CR2 and CR, and put the result in CR1. 
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COPROCESSOR DATA TRANSFERS (LDC, STC) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction encoding is shown in Figure 3-26. 


This class of instruction is used to load (LDC) or store (STC) a subset of a coprocessors's registers directly to 
memory. ARM920T is responsible for supplying the memory address, and the coprocessor supplies or accepts the 
data and controls the number of words transferred. 


28 27 ~=—25 24 23 22 21 20 19 1615 12 11 0 


[7:0] Unsigned 8 Bit Immediate Offset 

[11:8] Coprocessor Number 

[15:12] Coprocessor Source/Destination Register 
[19:16] Base Register 

[20] Load/Store Bit 

0 = Store to memory 

1 = Load from memory 

[21] Write-back Bit 

0 = No write-back 


1 = Write address into base 


[22] Transfer Length 


[23] Up/Down Bit 
0 = Down: subtract offset from base 
1 = Up: add offset to base 


[24] Pre/Post Indexing Bit 
0 = Post: add offset after transfer 
1 = Pre: add offset before transfer 


[31:28] Condition Field 


Figure 3-26. Coprocessor Data Transfer Instructions 
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THE COPROCESSOR FIELDS 


The CP# field is used to identify the coprocessor which is required to supply or accept the data, and a coprocessor 
will only respond if its number matches the contents of this field. 


The CRad field and the N bit contain information for the coprocessor which may be interpreted in different ways by 
different coprocessors, but by convention CRd is the register to be transferred (or the first register where more than 
one is to be transferred), and the N bit is used to choose one of two transfer length options. For instance N=0 could 
select the transfer of a single register, and N = 1 could select the transfer of all the registers for context switching. 


ADDRESSING MODES 


ARM920T is responsible for providing the address used by the memory system for the transfer, and the addressing 
modes available are a subset of those used in single data transfer instructions. Note, however, that the immediate 
offsets are 8 bits wide and specify word offsets for coprocessor data transfers, whereas they are 12 bits wide and 
specify byte offsets for single data transfers. 


The 8-bit unsigned immediate offset is shifted left 2 bits and either added to (U = 1) or subtracted from (U = 0) the 
base register (Rn); this calculation may be performed either before (P = 1) or after (P = 0) the base is used as the 
transfer address. The modified base value may be overwritten back into the base register (if W = 1), or the old value 
of the base may be preserved (W = 0). Note that post-indexed addressing modes require explicit setting of the W bit, 
unlike LDR and STR which always write-back when post-indexed. 


The value of the base register, modified by the offset in a pre-indexed instruction, is used as the address for the 
transfer of the first word. The second word (if more than one is transferred) will go to or come from an address one 
word (4 bytes) higher than the first transfer, and the address will be incremented by one word for each subsequent 
transfer. 


ADDRESS ALIGNMENT 


The base address should normally be a word aligned quantity. The bottom 2 bits of the address will appear on A[1:0] 
and might be interpreted by the memory system. 


Use of R15 


If Rn is R15, the value used will be the address of the instruction plus 8 bytes. Base write-back to R15 must not be 
specified. 


DATA ABORTS 


If the address is legal but the memory manager generates an abort, the data trap will be taken. The write-back of the 
modified base will take place, but all other processor state will be preserved. The coprocessor is partly responsible 
for ensuring that the data transfer can be restarted after the cause of the abort has been resolved, and must ensure 
that any subsequent actions it undertakes can be repeated when the instruction is retried. 


Instruction cycle times 
Coprocessor data transfer instructions take (n-1)S + 2N + bl incremental cycles to execute, where: 
n The number of words transferred. 


b The number of cycles spent in the coprocessor busy-wait loop. 


S, N and | are defined as sequential (S-cycle), non-sequential (N-cycle), and internal (|-cycle), respectively. 
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ASSEMBLER SYNTAX 
<LDC|STC>{cond}{L} p#,cd,<Address> 


LDC Load from memory to coprocessor 

STC Store from coprocessor to memory 

{L} When present perform long transfer (N = 1), otherwise perform short transfer (N = 0) 

{cond} Two character condition mnemonic. See Table 3-2.. 

p# The unique number of the required coprocessor 

cd An expression evaluating to a valid coprocessor register number that is placed in the 
CRad field 

<Address> can be: 

1 An expression which generates an address: 


The assembler will attempt to generate an instruction using the PC as a base anda 
corrected immediate offset to address the location given by evaluating the expression. 
This will be a PC relative, pre-indexed address. If the address is out of range, an error 
will be generated 


2 A pre-indexed addressing specification: 
[Rn] offset of zero 
[Rn,<#expression>]{!} offset of <expression> bytes 
3 A post-indexed addressing specification: 
[Rn],<#expression offset of <expression> bytes 
{I} write back the base register (set the W bit) if! is present 
Rn is an expression evaluating to a valid 


ARM920T register number. 


NOTE 


If Rn is R15, the assembler will subtract 8 from the offset value to allow for ARM920T pipelining. 


EXAMPLES 
LDC p1,c2,table ; Load c2 of coproc 1 from address 
; table, using a PC relative address. 
STCEQL p2,c3,[R5,#24]! ; Conditionally store c3 of coproc 2 


; into an address 24 bytes up from R5, 
; write this address back to R5, and use 
; long transfer option (probably to store multiple words). 


NOTE 


Although the address offset is expressed in bytes, the instruction offset field is in words. The assembler will 
adjust the offset appropriately. 
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COPROCESSOR REGISTER TRANSFERS (MRC, MCR) 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2.. The 
instruction encoding is shown in Figure 3-27. 


This class of instruction is used to communicate information directly between ARM920T and a coprocessor. An 
example of a coprocessor to ARM920T register transfer (MRC) instruction would be a FIX of a floating point value 
held in a coprocessor, where the floating point number is converted into a 32-bit integer within the coprocessor, and 
the result is then transferred to ARM920T register. A FLOAT of a 32 bit value in ARM920T register into a floating 
point value within the coprocessor illustrates the use of ARM920T register to coprocessor transfer (MCR). 


An important use of this instruction is to communicate control information directly from the coprocessor into the 
ARM920T CPSR flags. As an example, the result of a comparison of two floating point values within a coprocessor 
can be moved to the CPSR to control the subsequent flow of execution. 


28 27 2423 212019 1615 12 11 7 5 4 3 


Dome [ne [oroe[e] om [= [om [@ [] om 


[3:0] Coprocessor Operand Register 

[7:5] Coprocessor Information 

[11:8] Coprocessor Number 

[15:12] ARM Source/Destination Register 
[19:16] Coprocessor Source/Destination Register 
[20] Load/Store Bit 

0 = Store to coprocessor 


1 = Load from coprocessor 


[21] Coprocessor Operation Mode 


[31:28] Condition Field 


Figure 3-27. Coprocessor Register Transfer Instructions 


THE COPROCESSOR FIELDS 
The CP# field is used, as for all coprocessor instructions, to specify which coprocessor is being called upon. 


The CP Opc, CRn, CP and CRm fields are used only by the coprocessor, and the interpretation presented here is 
derived from convention only. Other interpretations are allowed where the coprocessor functionality is incompatible 
with this one. The conventional interpretation is that the CP Opc and CP fields specify the operation the coprocessor 
is required to perform, CRn is the coprocessor register which is the source or destination of the transferred 
information, and CRm is a second coprocessor register which may be involved in some way which depends on the 
particular operation specified. 
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TRANSFERS TO R15 


When a coprocessor register transfer to ARM920T has R15 as the destination, bits 31, 30, 29 and 28 of the 
transferred word are copied into the N, Z, C and V flags respectively. The other bits of the transferred word are 
ignored, and the PC and other CPSR bits are unaffected by the transfer. 


TRANSFERS FROM R15 


A coprocessor register transfer from ARM920T with R15 as the source register will store the PC+12. 


INSTRUCTION CYCLE TIMES 
MRC instructions take 1S + (b+1)l +1C incremental cycles to execute, where S, | and C are defined as sequential 


(S-cycle), internal (I-cycle), and coprocessor register transfer (C-cycle), respectively. MCR instructions take 1S + bl 
+1C incremental cycles to execute, where b is the number of cycles spent in the coprocessor busy-wait loop. 


ASSEMBLER SYNTAX 


<MCR|MRC=>{conq} p#,<expression1>,Rd,cn,cm{,<expression2>} 


MRC Move from coprocessor to ARM920T register (L=1) 
MCR Move from ARM920T register to coprocessor (L=0) 
{cond} Two character condition mnemonic. See Table 3-2 
p# The unique number of the required coprocessor 
<expression1> Evaluated to a constant and placed in the CP Opc field 
Rd An expression evaluating to a valid ARM920T register number 
cn and cm Expressions evaluating to the valid coprocessor register numbers CRn and CRm 
respectively 
<expression2> Where present is evaluated to a constant and placed in the CP field 
EXAMPLES 
MRC p2,5,R3,c5,c6 ; Request coproc 2 to perform operation 5 


; oncéd and c6, and transfer the (single 
; 32-bit word) result back to R3. 


MCR p6,0,R4,c5,c6 ; Request coproc 6 to perform operation 0 
; on R4 and place the result in c6. 
MRCEQ p3,9,R3,c5,c6,2 ; Conditionally request coproc 3 to 


; perform operation 9 (type 2) on c5 and 
; 6, and transfer the result back to R3. 
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UNDEFINED INSTRUCTION 


The instruction is only executed if the condition is true. The various conditions are defined in Table 3-2. The 
instruction format is shown in Figure 3-28. 


2827 25 24 


Figure 3-28. Undefined Instruction 


If the condition is true, the undefined instruction trap will be taken. 


Note that the undefined instruction mechanism involves offering this instruction to any coprocessors which may be 
present, and all coprocessors must refuse to accept it by driving CPA and CPB HIGH. 


INSTRUCTION CYCLE TIMES 


This instruction takes 2S + 11 + 1N cycles, where S, N and | are defined as sequential (S-cycle), non-sequential (N- 
cycle), and internal (I-cycle). 


ASSEMBLER SYNTAX 


The assembler has no mnemonics for generating this instruction. If it is adopted in the future for some specified use, 
suitable mnemonics will be added to the assembler. Until such time, this instruction must not be used. 
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INSTRUCTION SET EXAMPLES 


ARM INSTRUCTION SET 


The following examples show ways in which the basic ARM920T instructions can combine to give efficient code. 
None of these methods saves a great deal of execution time (although they may save some), mostly they just save 


code. 


USING THE CONDITIONAL INSTRUCTIONS 


Using Conditionals for Logical OR 


CMP Rn,#p 
BEQ Label 
CMP Rm,#q 
BEQ Label 


This can be replaced by 


CMP Rn,#p 
CMPNE Rm,#q 
BEQ Label 


Absolute Value 


TEQ Rn,#0 
RSBMI Rn,Rn,#0 


Multiplication by 4, 5 or 6 (Run Time) 


MOV Rc,Ra,LSL#2 
CMP Rb,#5 
ADDCS Rc,Re,Ra 
ADDHI Rce,Rc,Ra 


Combining Discrete and Range Tests 


TEQ Re,#127 
CMPNE Re,#" "-1 
MOVLS Re,#"" 
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If Rn=p OR Rm=q THEN GOTO Label. 


If condition not satisfied try other test. 


Test sign 
and 2's complement if necessary. 


Multiply by 4, 

Test value, 

Complete multiply by 5, 
Complete multiply by 6. 


Discrete test, 

Range test 

IF Re<="" OR Rce=ASCII(127) 
THEN Re:s= "." 
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Division and Remainder 


S3C2410A 


A number of divide routines for specific applications are provided in source form as part of the ANSI C library provided 
with the ARM Cross Development Toolkit, available from your supplier. A short general purpose divide routine follows. 


MOV Rent,#1 

Div1 CMP Rb,#0x80000000 
CMPCC Rb,Ra 
MOVCC Rb,Rb,ASL#1 
MOVCC Rent,Rent,ASL#1 


BCC Div1 
MOV Rc,#0 
Div2 CMP Ra,Rb 


SUBCS Ra,Ra,Rb 
ADDCS Re,Re,Rent 


MOVS Rent,Rent,_LSR#1 
MOVNE Rb,Rb,LSR#1 
BNE Div2 


Overflow Detection in the ARM920T 
1. Overflow in unsigned multiply with a 32-bit result 


UMULL Rd,Rt,Rm,Rn 
TEQ Rt,#0 
BNE overflow 


2. Overflow in signed multiply with a 32-bit result 


SMULL Rd,Rt,Rm,Rn 
TEQ Rt,Rd ASR#31 
BNE overflow 


Enter with numbers in Ra and Rb. 
Bit to control the division. 
Move Rb until greater than Ra. 


Test for possible subtraction. 
Subtract if ok, 

Put relevant bit into result 
Shift control bit 

Halve unless finished. 


Divide result in Re, remainder in Ra. 


3 to 6 cycles 
+1 cycle and a register 


3 to 6 cycles 
+1 cycle and a register 


3. Overflow in unsigned multiply accumulate with a 32-bit result 


UMLAL Rd,Rt,Rm,Rn 
TEQ Rt,#0 
BNE overflow 


4 to 7 cycles 
+1 cycle and a register 


4. Overflow in signed multiply accumulate with a 32-bit result 


SMLAL Rd,Rt,Rm,Rn 
TEQ Rt,Rd, ASR#31 
BNE overflow 


4 to 7 cycles 
+1 cycle and a register 
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5. Overflow in unsigned multiply accumulate with a 64-bit result 


UMULL RI,Rh,Rm,Rn ; 3to6cycles 

ADDS RI,Rl,Rat ; Lower accumulate 
ADC Rh,Rh,Ra2 ; Upper accumulate 
BCS overflow ; 1 cycle and 2 registers 


6. Overflow in signed multiply accumulate with a 64-bit result 


SMULL RI,Rh,Rm,Rn ; 3to6cycles 

ADDS RI,Rl,Rat ; Lower accumulate 

ADC Rh,Rh,Ra2 ; Upper accumulate 

BVS overflow ; 1 cycle and 2 registers 
NOTE 
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Overflow checking is not applicable to unsigned and signed multiplies with a 64-bit result, since overflow 


does not occur in such calculations. 


PSEUDO-RANDOM BINARY SEQUENCE GENERATOR 


It is often necessary to generate (pseudo-) random numbers and the most efficient algorithms are based on shift 
generators with exclusive-OR feedback rather like a cyclic redundancy check generator. Unfortunately the sequence 
of a 32-bit generator needs more than one feedback tap to be maximal length (i.e. 2*32-1 cycles before repetition), 
so this example uses a 33-bit register with taps at bits 33 and 20. The basic algorithm is newbit:=bit 33 eor bit 20, 
shift left the 33-bit number and put in newbit at the bottom; this operation is performed for all the newbits needed (i.e. 


32 bits). The entire operation can be done in 5 S cycles: 


; Enter with seed in Ra (82 bits), 


; Rb (1 bit in Rb Isb), uses Re. 


TST Rb,Rb,LSR#1 ; Top bit into carry 

MOVS Rc,Ra,RRX ; 33 bit rotate right 

ADC Rb,Rb,Rb ; Carry into Isb of Rb 

EOR Re,Re,Ra,LSL#12 ; (involved!) 

EOR Ra,Rc,Rc,LSR#20 ; (similarly involved!) new seed in Ra, Rb as before 


MULTIPLICATION BY CONSTANT USING THE BARREL SHIFTER 
Multiplication by 2’n (1,2,4,8,16,32..) 
MOV Ra, Rb, LSL #n 


Multiplication by 2“n+1 (3,5,9,17..) 


ADD Ra,Ra,Ra,LSL #n 


Multiplication by 24n-1 (3,7,15..) 


RSB Ra,Ra,Ra,LSL #n 
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Multiplication by 6 


ADD Ra,Ra,Ra,LSL #1 
MOV Ra,Ra,LSL#1 


Multiply by 10 and add in extra number 


ADD Ra,Ra,Ra,LSL#2 
ADD Ra,Re,Ra,LSL#1 


General recursive method for Rb := Ra*C, C a constant: 


1. If C even, say C = 24n*D, D odd: 


D=1: MOV Rb,Ra,LSL #n 
D<>1: {Rb := Ra*D} 
MOV Rb,Rb,LSL #n 


2. If C MOD 4 = 1, say C = 24n*D+1, D odd, n>1: 


D=1: ADD Rb,Ra,Ra,LSL #n 
D<>1: {Rb := Ra*D} 
ADD Rb,Ra,Rb,LSL #n 


3. If C MOD 4 = 3, say C = 24n*D-1, D odd, n>1: 


D=1: RSB_ Rb,Ra,Ra,LSL #n 
D<>1: {Rb := Ra*D} 
RSB Rb,Ra,Rb,LSL #n 
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Multiply by 3 
and then by 2 


Multiply by 5 
Multiply by 2 and add in next digit 


This is not quite optimal, but close. An example of its non-optimality is multiply by 45 which is done by: 


RSB Rb,Ra,Ra,LSL#2 
RSB Rb,Ra,Rb,LSL#2 
ADD Rb,Ra,Rb,LSL# 2 


rather than by: 


ADD Rb,Ra,Ra,LSL#3 
ADD Rb,Rb,Rb,LSL#2 


Multiply by 3 
Multiply by 4*3-1 = 11 
Multiply by 4*11+1 = 45 


Multiply by 9 
Multiply by 5*9 = 45 
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LOADING A WORD FROM AN UNKNOWN ALIGNMENT 


BIC 
LDMIA 
AND 
MOVS 
MOVNE 
RSBNE 
ORRNE 
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Rb,Ra,#3 
Rb,{Rd,Rc} 
Rb,Ra,#3 
Rb,Rb,LSL#3 
Rd,Rd,LSR Rb 
Rb,Rb,#32 
Rd,Rd,Re,LSL Rb 
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Enter with address in Ra (32 bits) uses 

Rb, Rc result in Rd. Note d must be less than c e.g. 0,1 
Get word aligned address 

Get 64 bits containing answer 

Correction factor in bytes 

...now in bits and test if aligned 

Produce bottom of result word (if not aligned) 

Get other shift amount 

Combine two halves to get result 


ARM INSTRUCTION SET S3C2410A 


NOTES 
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THUMB INSTRUCTION SET 


THUMB INSTRUCTION SET FORMAT 


The thumb instruction sets are 16-bit versions of ARM instruction sets (32-bit format). The ARM instructions are 
reduced to 16-bit versions, Thumb instructions, at the cost of versatile functions of the ARM instruction sets. The 
thumb instructions are decompressed to the ARM instructions by the Thumb decompressor inside the ARM920T 
core. 


As the Thumb instructions are compressed ARM instructions, the Thumb instructions have the 16-bit format 


instructions and have some restrictions. The restrictions by 16-bit format is fully notified for using the Thumb 
instructions. 
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FORMAT SUMMARY 


The THUMB instruction set formats are shown in the following figure. 


15 14 13 12 1110 9 8 7 6 


fo{olo] o | ote | Ps Move Shifted register 
————————— Addi subtract 


Offset8 Move/compare/add/ 
subtract immediate 


ALU operations 


— H2 — a Hi register operations 
/branch exchange 


Words PC-relative load 


Load/store with register 
offset 

H|S Load/store sign-extended 
byte/halfword 


Offset5 Load/store with immediate 
offset 


tht Ee Load/store halfword 
CC SP-relative load/store 
a sp]_rd | Worse | Load adaress 
ing i ee ee Add offset to stack pointer 
Fi fofiajafefrfo[R} Rist Push/pop register 
tfifofole} re | plist | Muttipleloadistore 
tt rfofs| cond | Sotset@ | Concitiona branch 
RG a Software interrupt 

1ftfifofof — Ofsett Unconditional branch 
a Long branch with link 


15 14 13 12 1110 9 8 7 6 


Figure 4-1. THUMB Instruction Set Formats 
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OPCODE SUMMARY 


The following table summarizes the THUMB instruction set. For further information about a particular instruction 
please refer to the sections listed in the right-most column. 


Table 4-1. THUMB Instruction Set Opcodes 


Lo-Register Hi-Register Condition 
oe Operand Codes Set 


Add 


a] 
se — lames AGE 
[2 [uneonattonal brane SiS 
[Bx [Condtonaanen | 
as 
—_—_— 


CMP Compare 


2) 


LDMIA Load multiple 


[a 
SR [isl signe 
NOY |Wovwroiser ve 
[wu [Mury SSS 
[Mv ___[Move Negaworegiter——=SC*dtCSCYSCC* 


= 


es 


‘| 


< 


< 
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Table 4-1. THUMB Instruction Set Opcodes (Continued) 


Operand Operand Codes Set 
NEG Neate 
ee) 
Por _—iiPonresster ——SSSCSC*C~=“~*~‘“dRSC‘aYSSC*dGSC‘SKSCC*' 
Pus [Pushresiser dE SY 
ROR [Rowen CES 
Swi 


NOTES: 
1. The condition codes are unaffected by the format 5, 12 and 13 versions of this instruction. 
2. The condition codes are unaffected by the format 5 version of this instruction. 


<|<|< 
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FORMAT 1: MOVE SHIFTED REGISTER 


[2:0] Destination Register 


[5:3] Source Register 


[10:6] Immediate Vale 


[12:11] Opcode 
0=LSL 
1=LSR 
2=ASR 


Figure 4-2. Format 1 


OPERATION 


These instructions move a shifted value between Lo registers. The THUMB assembler syntax is shown in 
Table 4-2. 


NOTE 


All instructions in this group set the CPSR condition codes. 


Table 4-2. Summary of Format 1 Instructions 


| op | THUMB Assembler ARM Equipment 


LSL Rd, Rs, #Offset5 MOVS Rad, Rs, LSL #Offset5 a Rs left by a 5-bit immediate 
value and store the result in Rd. 


LSR Rad, Rs, #Offset5 MOVS Rd, Rs, LSR #Offset5 | Perform logical shift right on Rs by a 


5-bit immediate value and store the 
result in Rd. 


ASR Rad, Rs, #Offset5 MOVS Rd, Rs, ASR #Offset5 | Perform arithmetic shift right on Rs 
by a 5-bit immediate value and store 
the result in Rd. 
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INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-2. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


LSR R2, R5, #27 ; Logical shift right the contents 
; of R5 by 27 and store the result in R2. 


; Set condition codes on the result. 
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FORMAT 2: ADD/SUBTRACT 


15 14 13 12 11 10 9 8 6 5 3 2 0 
poftots {ifs for] Rnorses | ors | ra | 


[2:0] Destination Register 


[5:3] Source Register 


[8:6] Register/Immediate Vale 


[9] Opcode 
0 = ADD 
1 =SUB 


[10] Immediate Flag 
0 = Register operand 
1 = Immediate oerand 


Figure 4-3. Format 2 


OPERATION 


These instructions allow the contents of a Lo register or a 3-bit immediate value to be added to or subtracted from a 
Lo register. The THUMB assembler syntax is shown in Table 4-3. 


NOTE 


All instructions in this group set the CPSR condition codes. 


Table 4-3. Summary of Format 2 Instructions 


aifY 
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INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-3. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


ADD RO, R3, R4 
SUB R6, R2, #6 


; RO := R3 + R4 and set condition codes on the result. 
; R6 := R2 - 6 and set condition codes. 
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FORMAT 3: MOVE/COMPARE/ADD/SUBTRACT IMMEDIATE 


7 0 


15 14 13 12 11 10 8 
Pofo[o] » | = | ome —sd 


[7:0] Immediate Vale 


[10:8] Source/Destination Register 


[12:11] Opcode 
0 =MOV 
1 =CMP 
2=ADD 
3 = SUB 


Figure 4-4. Format 3 


OPERATIONS 


The instructions in this group perform operations between a Lo register and an 8-bit immediate value. The THUMB 
assembler syntax is shown in Table 4-4. 


NOTE 
All instructions in this group set the CPSR condition codes. 


Table 4-4. Summary of Format 3 Instructions 


| 00 | MOV Ra, #Offset8 MOVS Ra, #Offset8 Move 8-bit immediate value into Rd. 


CMP Rd, #Offset8 CMP Rd, #Offset8 Compare contents of Rd with 8-bit immediate 
value. 


10 ADD Ra, #Offset8 ADDS Ra, Rad, #Offset8 Add 8-bit immediate value to contents of Rd 
and place the result in Rd. 

11 SUB Rad, #Offset8 SUBS Fad, Rd, #Offset8 Subtract 8-bit immediate value from contents 
of Rd and place the result in Rd. 
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INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-4. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 
MOV RO, #128 ; RO := 128 and set condition codes 
CMP R2, #62 ; Set condition codes on R2 - 62 
ADD R1, #255 ; R11 :=R1 + 255 and set condition codes 
SUB R6, #145 ; R6 := R6 - 145 and set condition codes 
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$3C2410A THUMB INSTRUCTION SET 


FORMAT 4: ALU OPERATIONS 


12 11 10 9 6 5 3 2 0 


15 14 13 
pofotototofo} im firs ft 


[2:0] Source/Destination Register 
[5:3] Source Register 2 
[9:6] Opcode 


Figure 4-5. Format 4 


OPERATION 
The following instructions perform ALU operations on a Lo register pair. 


NOTE 


All instructions in this group set the CPSR condition codes. 


Table 4-5. Summary of Format 4 Instructions 


[oP [THUMB Assembler | _ARMEquipment [| ——~—=ion Sd 


aifY 


ELECTRONICS 4-11 


0111 ROR Rad, Rs MOVS Rad, Rd, ROR Rs Rd := Rd ROR Rs 


THUMB INSTRUCTION SET 


INSTRUCTION CYCLE TIMES 


S3C2410A 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-5. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


EOR 
ROR 


NEG 


CMP 
MUL 


R38, R4 
Ri, RO 


R5, R3 


R2, R6 
RO, R7 


R3 := R3 EOR R4 and set condition codes 

Rotate Right R1 by the value in RO, store 

the result in R1 and set condition codes 

Subtract the contents of R3 from zero, 

Store the result in R5. Set condition codes ie R5 = - R3 
Set the condition codes on the result of R2 - R6 

RO := R7 * RO and set condition codes 


ELECTRONICS 


$3C2410A THUMB INSTRUCTION SET 


FORMAT 5: HI-REGISTER OPERATIONS/BRANCH EXCHANGE 


9 


12 
CeTe Too Po Po] o [w]e] am [ama — 


[2:0] Destination Register 


[5:3] Source Register 
[6] Hi Operand Flag 2 
[7] Hi Operand Flag 1 


[9:8] Opcode 


Figure 4-6. Format 5 


OPERATION 
There are four sets of instructions in this group. The first three allow ADD, CMP and MOV operations to be performed 


between Lo and Hi registers, or a pair of Hi registers. The fourth, BX, allows a Branch to be performed which may 
also be used to switch processor state. The THUMB assembler syntax is shown in Table 4-6. 


NOTE 
In this group only CMP (Op = 01) sets the CPSR condition codes. 


The action of H1= 0, H2 = 0 for Op = 00 (ADD), Op =01 (CMP) and Op = 10 (MOV) is undefined, and should not be 
used. 


Table 4-6. Summary of Format 5 Instructions 


Een THUMB assembler ARM equivalent 
ADD Rd, Hs ADD Rd, Rd, Hs a a register in the range 8-15 toa 
register in the range 0-7. 
ADD Hd, Rs ADD Hd, Hd, Rs Add a register in the range 0-7 toa 
al in the range 8-15. 


zm ADD Hd, Hs ADD Hd, Hd, Hs | Add two registers in the range 8-15 | 
01 


aif 
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CMP Hd, Rs CMP Hd, Rs Compare a register in the range 8-15 
with a register in the range 0-7. Set the 
condition code flags on the result. 


CMP Rd, Hs CMP Rd, Hs Compare a register in the range 0-7 
with a register in the range 8-15. Set 
the condition code flags on the result. 


THUMB INSTRUCTION SET S3C2410A 


Table 4-6. Summary of Format 5 Instructions (Continued) 


01 1 1 CMP Hd, Hs CMP Hd, Hs Compare two registers in the range 
8-15. Set the condition code flags on 
the result. 

10 1 MOV Rd, Hs MOV Rad, Hs Move a value from a register in the 
range 8-15 to a register in the range 0- 
7: 

10 1 MOV Hd, Rs MOV Hd, Rs Move a value from a register in the 
range 0-7 to a register in the range 
8-15. 


10 MOV Hd, Hs MOV Hd, Hs Move a value between two registers in 

the range 8-15. 

BX Rs BX Rs Perform branch (plus optional state 
change) to address in a register in the 
range 0-7. 

BX Hs BX Hs Perform branch (plus optional state 
change) to address in a register in the 
range 8-15. 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-6. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


THE BX INSTRUCTION 
BX performs a Branch to a routine whose start address is specified in a Lo or Hi register. 


Bit 0 of the address determines the processor state on entry to the routine: 


Bit0 =0 Causes the processor to enter ARM state. 
Bit 0 = 1 Causes the processor to enter THUMB state. 
NOTE 


The action of H1 = 1 for this instruction is undefined, and should not be used. 
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$3C2410A 


EXAMPLES 


Hi-Register Operations 


ADD PC, R5 
CMP R4, R12 
MOV R15, R14 


Branch and Exchange 


ADR R1,outof[HUMB 
MOV R11,R1 

BX R11 

ALIGN 

CODE32 

outofTHUMB 


USING R15 AS AN OPERAND 


THUMB INSTRUCTION SET 


PC := PC + Rd but don't set the condition codes. 
Set the condition codes on the result of R4 - R12. 
Move R14 (LR) into R15 (PC) 

but don't set the condition codes, 

eg. return from subroutine. 


Switch from THUMB to ARM state. 
Load address of outofTHUMB into R1. 


Transfer the contents of R11 into the PC. 


Bit 0 of R11 determines whether 
ARM or THUMB state is entered, ie. ARM state here. 


Now processing ARM instructions... 


If R15 is used as an operand, the value will be the address of the instruction + 4 with bit 0 cleared. Executing a BX 
PC in THUMB state from a non-word aligned address will result in unpredictable execution. 


ELECTRONICS 


THUMB INSTRUCTION SET S3C2410A 


FORMAT 6: PC-RELATIVE LOAD 


15 14 #13 #12 ~«11 10 8 7 0 


popofoto 


[7:0] Immediate Value 


[10:8] Destination Register 


Figure 4-7. Format 6 


OPERATION 


This instruction loads a word from an address specified as a 10-bit immediate offset from the PC. The THUMB 
assembler syntax is shown below. 


Table 4-7. Summary of PC-Relative Load Instruction 


LDR Ra, [PC, #lmm] LDR Rd, [R15, #lmm] Add unsigned offset (255 words, 1020 bytes) in 


Imm to the current value of the PC. Load the 
word from the resulting address into Rd. 


NOTE: The value specified by #lmm is a full 10-bit address, but must always be word-aligned (ie with bits 1:0 set to 0), 
since the assembler places #Ilmm >> 2 in field Word 8. The value of the PC will be 4 bytes greater than the address 
of this instruction, but bit 1 of the PC is forced to 0 to ensure it is word aligned. 
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$3C2410A THUMB INSTRUCTION SET 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction. The instruction cycle times for the THUMB 
instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


LDR R3,[PC,#844] ; Load into R3 the word found at the 
; address formed by adding 844 to PC. 
; bit[1] of PC is forced to zero. 
; Note that the THUMB opcode will contain 
; 211 as the Word8 value. 
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THUMB INSTRUCTION SET S3C2410A 


FORMAT 7: LOAD/STORE WITH REGISTER OFFSET 


15 14 13 12 11 10 9 8 6 5 3 2 0 
pt tots tefeto] im fom fr | 


[2:0] Source/Destination Register 


[5:3] Base Register 


[8:6] Offset Register 


[10] Byte/Word Flag 
0 = Transfer word quantity 
1 = Transfer byte quantity 


[11] Load/Store Flag 
0 = Store to memory 
1 = Load from memory 


Figure 4-8. Format 7 
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OPERATION 


These instructions transfer byte or word values between registers and memory. Memory addresses are pre-indexed 
using an offset register in the range 0-7. The THUMB assembler syntax is shown in Table 4-8. 


Table 4-8. Summary of Format 7 Instructions 


STR Rd, [Rb, Ro] STR Rd, [Rb, Ro] Pre-indexed word store: 
Calculate the target address by adding 
together the value in Rb and the value in 
Ro. Store the contents of Rd at the 
address. 


STRB Rad, [Rb, Ro] STRB Rad, [Rb, Ro] Pre-indexed byte store: 
Calculate the target address by adding 
together the value in Rb and the value in 
Ro. Store the byte value in Rd at the 
resulting address. 


LDR Rad, [Rb, Ro] LDR Ra, [Rb, Ro] Pre-indexed word load: 
Calculate the source address by adding 
together the value in Rb and the value in 
Ro. Load the contents of the address into 
Rd. 


LDRB Rad, [Rb, Ro] LDRB Rad, [Rb, Ro] Pre-indexed byte load: 


Calculate the source address by adding 
together the value in Rb and the value in 
Ro. Load the byte value at the resulting 
address. 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-8. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 
STR R3, [R2,R6] ; Store word in R3 at the address 
; formed by adding R6 to R2. 
LDRB R2, [RO,R7] ; Load into R2 the byte found at 


; the address formed by adding R7 to RO. 
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THUMB INSTRUCTION SET S3C2410A 


FORMAT 8: LOAD/STORE SIGN-EXTENDED BYTE/HALFWORD 


15 14 13 12 = 11 10 9 8 6 5 3 2 0 
Pott fott tats pt] ro Pm rs 


[2:0] Destination Register 


[5:3] Base Register 


[8:6] Offset Register 

[10] Sign-Extended Flag 

0 = Operand not sing-extended 
1 = Operand sing-extended 


[11] H Flag 


Figure 4-9. Format 8 


OPERATION 


These instructions load optionally sign-extended bytes or halfwords, and store halfwords. The THUMB assembler 
syntax is shown below. 


Table 4-9. Summary of format 8 instructions 


STRH Rad, [Rb, Ro] STRH Rad, [Rb, Ro] Store halfword: 


Add Ro to base address in Rb. Store bits 
0-15 of Rd at the resulting address. 
LDRH Rad, [Rb, Ro] LDRH Rad, [Rb, Ro] Load halfword: 


Add Ro to base address in Rb. Load bits 
0-15 of Rd from the resulting address, and 
set bits 16-31 of Rd to 0. 


LDSB Rd, [Rb, Ro] LDRSB Rad, [Rb, Ro] Load sign-extended byte: 


Add Ro to base address in Rb. Load bits 
0-7 of Rd from the resulting address, and 
set bits 8-31 of Rd to bit 7. 


LDSH Rad, [Rb, Ro] LDRSH Rad, [Rb, Ro] Load sign-extended halfword: 


Add Ro to base address in Rb. Load bits 
0-15 of Rd from the resulting address, and 
set bits 16-31 of Rd to bit 15. 
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$3C2410A THUMB INSTRUCTION SET 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-9. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 
STRH R4, [R3, RO} ; Store the lower 16 bits of R4 at the 
; address formed by adding RO to R3. 
LDSB R2, [R7, R1] ; Load into R2 the sign extended byte 
; found at the address formed by adding R1 to R7. 
LDSH R3, [R4, R2] ; Load into R3 the sign extended halfword 


; found at the address formed by adding R2 to R4. 
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THUMB INSTRUCTION SET S3C2410A 


FORMAT 9: LOAD/STORE WITH IMMEDIATE OFFSET 


15 14 13 12 11 10 6 5 3 2 0 
Cs ee ee 
[2:0] Source/Destination Register 
[5:3] Base Register 


[10:6] Offset Register 


[11] Load/Store Flag 
0 = Store to memory 
1 = Load from memory 


[12] Byte/Word Flad 
0 = Transfer word quantity 
1 = Transfer byte quantity 


Figure 4-10. Format 9 


4-22 ELECTRONICS 


$3C2410A THUMB INSTRUCTION SET 


OPERATION 


These instructions transfer byte or word values between registers and memory using an immediate 5 or 7-bit offset. 
The THUMB assembler syntax is shown in Table 4-10. 


Table 4-10. Summary of Format 9 Instructions 


STR Rd, [Rb, #lmm] STR Rd, [Rb, #lmm] Calculate the target address by adding 
together the value in Rb and Imm. Store 
the contents of Rd at the address. 


LDR Rd, [Rb, #lmm] LDR Rad, [Rb, #lmm] Calculate the source address by adding 
together the value in Rb and Imm. Load 


Rd from the address. 


STRB Rad, [Rb, #lmm] STRB Rad, [Rb, #lmm] Calculate the target address by adding 
together the value in Rb and Imm. Store 
the byte value in Rd at the address. 


LDRB Rad, [Rb, #lmm] LDRB Rad, [Rb, #lmm] Calculate source address by adding 
together the value in Rb and Imm. Load 
the byte value at the address into Rd. 


NOTE: For word accesses (B = 0), the value specified by #lmm is a full 7-bit address, but must be word-aligned 
(ie with bits 1:0 set to 0), since the assembler places #lmm >> 2 in the Offset5 field. 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-10. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


LDR R2, [R5,#116] ; Load into R2 the word found at the 
; address formed by adding 116 to R85. 
; Note that the THUMB opcode will 
; contain 29 as the Offset5 value. 
STRB R1, [RO,#13] ; Store the lower 8 bits of R1 at the 
; address formed by adding 13 to RO. 
; Note that the THUMB opcode will 
; contain 13 as the Offset5 value. 
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THUMB INSTRUCTION SET S$3C2410A 


FORMAT 10: LOAD/STORE HALFWORD 


15 14 #13 #12 ~«114 10 6 5 3 2 0 


pots fofofiy otses Ps 


[2:0] Source/Destination Register 


[5:3] Base Register 
[10:6] Immediate Value 
[11] Load/Store Flag 


0 = Store to memory 
1 = Load from memory 


Figure 4-11. Format 10 


OPERATION 
These instructions transfer halfword values between a Lo register and memory. Addresses are pre-indexed, using a 


6-bit immediate value. The THUMB assembler syntax is shown in Table 4-11. 


Table 4-11. Halfword Data Transfer Instructions 


STRH Ra, [Rb, #lmm] STRH Ra, [Rb, #lmm] Add #lmm to base address in Rb and store 
bits 0 - 15 of Rd at the resulting address. 


0-15 from the resulting address into Rd and 
set bits 16-31 to zero. 


LDRH Ra, [Rb, #Imm] LDRH Rd, [Rb, #Imm] Add #Imm to base address in Rb. Load bits 


NOTE: #Imm isa full 6-bit address but must be halfword-aligned (ie with bit 0 set to 0) since the assembler places 
#lmm >> 1 in the Offset5 field. 
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$3C2410A THUMB INSTRUCTION SET 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-11. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


STRH R6, [R1, #56] ; Store the lower 16 bits of R4 at the address formed by 
; adding 56 R1. Note that the THUMB opcode will contain 
; 28 as the Offset5 value. 

LDRH R4, [R7, #4] ; Load into R4 the halfword found at the address formed by 
; adding 4 to R7. Note that the THUMB opcode will contain 
; 2 as the Offset5 value. 
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THUMB INSTRUCTION SET S$3C2410A 


FORMAT 11: SP-RELATIVE LOAD/STORE 


15 14 18 12 11 10 8 7 0 


pi ftofot: fe) 


[7:0] Immediate Value 


[10:8] Destination Register 


[11] Load/Store Bit 
0 = Store to memory 
1 = Load from memory 


Figure 4-12. Format 11 


OPERATION 


The instructions in this group perform an SP-relative load or store. The THUMB assembler syntax is shown in the 
following table. 


Table 4-12. SP-Relative Load/Store Instructions 


STR Ra, [SP, #lmm] STR Ra, [R13 #lmm] Add unsigned offset (255 words, 1020 bytes) 
in Imm to the current value of the SP (R7). 
Store the contents of Rd at the resulting 


address. 


LDR Rd, [SP, #lmm] LDR Ra, [R13 #lmm] Add unsigned offset (255 words, 1020 bytes) 
in Imm to the current value of the SP (R7). 
Load the word from the resulting address into 
Rd. 


NOTE: The offset supplied in #lmm is a full 10-bit address, but must always be word-aligned (ie bits 1:0 set to 0), 
since the assembler places #Ilmm >> 2 in the Word8 field. 
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$3C2410A THUMB INSTRUCTION SET 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-12. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 
STR R4, [SP,#492] ; Store the contents of R4 at the address 
; formed by adding 492 to SP (R13). 
; Note that the THUMB opcode will contain 
; 123 as the Word8 value. 
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THUMB INSTRUCTION SET S3C2410A 


FORMAT 12: LOAD ADDRESS 


15 12 11 10 8 7 0 


14 13 
Pitot: o [s| 


[7:0] 8-bit Unsigned Constant 


[10:8] Destination Register 


[11] Source 
0=PC 
1=SP 


Figure 4-13. Format 12 


OPERATION 


These instructions calculate an address by adding an 10-bit constant to either the PC or the SP, and load the 
resulting address into a register. The THUMB assembler syntax is shown in the following table. 


Table 4-13. Load Address 


ADD Rad, PC, #lmm ADD Rad, R15, #lmm Add #lmm to the current value of the program 
counter (PC) and load the result into Rd. 


1 ADD Ra, SP, #lmm ADD Ra, R13, #lmm Add #lmm to the current value of the stack 
pointer (SP) and load the result into Rd. 


NOTE: The value specified by #lmm is a full 10-bit value, but this must be word-aligned (ie with bits 1:0 set to 0) 
since the assembler places #lmm >> 2 in field Word 8. 


Where the PC is used as the source register (SP = 0), bit 1 of the PC is always read as 0. The value of the PC will 
be 4 bytes greater than the address of the instruction before bit 1 is forced to 0. 


The CPSR condition codes are unaffected by these instructions. 
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$3C2410A THUMB INSTRUCTION SET 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-13. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


ADD R2, PC, #572 ; R2:= PC + 572, but don't set the 
; condition codes. bit[1] of PC is forced to zero. 
; Note that the THUMB opcode will 
; contain 143 as the Word8 value. 
ADD R6, SP, #212 ; R6 := SP (R13) + 212, but don't 
; set the condition codes. 
; Note that the THUMB opcode will 
; contain 53 as the Word 8 value. 
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THUMB INSTRUCTION SET S$3C2410A 


FORMAT 13: ADD OFFSET TO STACK POINTER 


15 14 #13 #12 ~«2114 6 0 


10 9 8 7 
ptftots ts fofofotots}  swor7 


[6:0] 7-bit Immediate Value 


[7] Sign Flag 
0 = Offset is positive 
1 = Offset is negative 


Figure 4-14. Format 13 


OPERATION 


This instruction adds a 9-bit signed constant to the stack pointer. The following table shows the THUMB assembler 
syntax. 


Table 4-14. The ADD SP Instruction 


| 0 ADD SP, #imm ADD R13, R13, #lmm Add #Imm to the stack pointer (SP). 
ADD SP, # -Imm SUB R13, R13, #lmm Add #-Imm to the stack pointer (SP). 


NOTE: The offset specified by #lmm can be up to -/+ 508, but must be word-aligned (ie with bits 1:0 set to 0) 
since the assembler converts #1mm to an 8-bit sign + magnitude number before placing it in field SWord7. 
The condition codes are not set by this instruction. 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-14. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


ADD SP, #268 ; SP (R13) := SP + 268, but don't set the condition codes. 
; Note that the THUMB opcode will 
; contain 67 as the Word7 value and S=0. 

ADD SP, #-104 ; SP (R13) := SP - 104, but don't set the condition codes. 
; Note that the THUMB opcode will contain 
; 26 as the Word7 value and S=1. 
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FORMAT 14: PUSH/POP REGISTERS 


12 
oper ele] a 


[7:0] Register List 


[8] PC/LR Bit 
0 = Do not store LR/Load PC 
1 = Store LR/Load PC 


[11] Load/Store Bit 
0 = Store to memory 
1 = Load from memory 


Figure 4-15. Format 14 


OPERATION 


The instructions in this group allow registers 0-7 and optionally LR to be pushed onto the stack, and registers 0-7 
and optionally PC to be popped off the stack. The THUMB assembler syntax is shown in Table 4-15. 


NOTE 


The stack is always assumed to be Full Descending. 


Table 4-15. PUSH and POP Instructions 


Peo] BL THUMB assembler ARM equivalent 
PUSH { Rlist } STMDB R13}, { Rlist } Push the registers —_—__ stn by Rlist onto 
the stack. Update the stack pointer. 


PUSH { Rlist, LR } STMDB R13}, Push the Link Register and the registers 
{ Rlist, R14 } specified by Rlist (if any) onto the stack. 
Update the stack pointer. 


1 POP { Rlist } LDMIA R13}, { Rlist } Pop values off the stack into the registers 
specified by Rlist. Update the stack 
pointer. 


1 1 POP { Rlist, PC } LDMIA R13!, {Rlist, R15} | Pop values off the stack and load into the 
registers specified by Rlist. Pop the PC off 
the stack. Update the stack pointer. 
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THUMB INSTRUCTION SET S3C2410A 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-15. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 


PUSH {RO-R4,LR} ; Store RO,R1,R2,R3,R4 and R14 (LR) at 
; the stack pointed to by R13 (SP) and update R13. 
; Useful at start of a sub-routine to 
; save workspace and return address. 
POP {R2,R6,PC} ; Load R2,R6 and R15 (PC) from the stack 
; pointed to by R13 (SP) and update R13. 
; Useful to restore workspace and return from sub-routine. 
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$3C2410A THUMB INSTRUCTION SET 


FORMAT 15: MULTIPLE LOAD/STORE 


15 12 #11 10 8 7 0 


14 13 
pits ftofote | pst 


[7:0] Register List 


[10:8] Base Register 


[11] Load/Store Bit 
0 = Store to memory 
1 = Load from memory 


Figure 4-16. Format 15 


OPERATION 
These instructions allow multiple loading and storing of Lo registers. The THUMB assembler syntax is shown in the 


following table. 


Table 4-16. The Multiple Load/Store Instructions 


STMIA Rb!, { Rlist } STMIA Rb!, { Rlist } Store the registers specified by Rlist, starting 
at the base address in Rb. Write back the 


new base address. 


LDMIA Rb!, { Rlist } LDMIA Rb!, { Rlist } Load the registers specified by Rlist, starting 
at the base address in Rb. Write back the 
new base address. 


INSTRUCTION CYCLE TIMES 

All instructions in this format have an equivalent ARM instruction as shown in Table 4-16. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 

EXAMPLES 


STMIA RO!, {R3-R7} ; Store the contents of registers R3-R7 
; starting at the address specified in 
; RO, incrementing the addresses for each word. 
; Write back the updated value of RO. 
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THUMB INSTRUCTION SET S3C2410A 


FORMAT 16: CONDITIONAL BRANCH 


15 11 8 7 0 


14 13 12 
ptt tots] cna | sttsers 


[7:0] 8-bit Signed Immediate 


[11:8] Condition 


Figure 4-17. Format 16 


OPERATION 


The instructions in this group all perform a conditional Branch depending on the state of the CPSR condition codes. 
The branch offset must take account of the prefetch operation, which causes the PC to be 1 word (4 bytes) ahead of 
the current instruction. 


The THUMB assembler syntax is shown in the following table. 


Table 4-17. The Conditional Branch Instructions 


[i [THUMB assembler | _ARMequivaient | ———Aalion = 
Branch if Z clear (not equal) 

Branch if C set (unsigned higher or same) 
Branch if C clear (unsigned lower) 


Branch if N clear (positive or zero) 
Branch if V clear (no overflow) 
Branch if C set and Z clear (unsigned higher) 
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Table 4-17. The Conditional Branch Instructions (Continued) 


1001 | BLS label BLS label Branch if C clear or Z set (unsigned lower or 
same) 

1010 | BGE label BGE label Branch if N set and V set, or N clear and V 
clear (greater or equal) 

1011 | BLT label BLT label Branch if N set and V clear, or N clear and V 
set (less than) 

1100 | BGT label BGT label Branch if Z clear, and either N set and V set 
or N clear and V clear (greater than) 

1101 | BLE label BLE label Branch if Z set, or N set and V clear, or N 
clear and V set (less than or equal) 


NOTES: 

1. While label specifies a full 9-bit two's complement address, this must always be halfword-aligned (ie with bit 0 set to 0) 
since the assembler actually places label >> 1 in field SOffset8. 

2. Cond =1110is undefined, and should not be used. 
Cond = 1111 creates the SWI instruction: see . 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 3-1. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 
CMP RO, #45; Branch to over-if RO > 45. 
BGT over ; Note that the THUMB opcode will contain 
° ; the number of halfwords to offset. 

over ° ; Must be halfword aligned. 
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THUMB INSTRUCTION SET S3C2410A 


FORMAT 17: SOFTWARE INTERRUPT 


15 14 18 11 10 7 0 
1 


12 9 8 
ptt tots ts ys ts ts vawes 


[7:0] Comment Field 


Figure 4-18. Format 17 


OPERATION 


The SWI instruction performs a software interrupt. On taking the SWI, the processor switches into ARM state and 
enters Supervisor (SVC) mode. 


The THUMB assembler syntax for this instruction is shown below. 


Table 4-18. The SWI Instruction 


SWI Value 8 SWI Value 8 Perform Software Interrupt: 
Move the address of the next instruction into LR, 
move CPSR to SPSR, load the SWI vector address 
(0x8) into the PC. Switch to ARM state and enter 
SVC mode. 


NOTE: Value8 is used solely by the SWI handler; it is ignored by the processor. 


INSTRUCTION CYCLE TIMES 


All instructions in this format have an equivalent ARM instruction as shown in Table 4-18. The instruction cycle times 
for the THUMB instruction are identical to that of the equivalent ARM instruction. 


EXAMPLES 
SWI 18 ; Take the software interrupt exception. 


; Enter Supervisor mode with 18 as the 
; requested SWI number. 
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FORMAT 18: UNCONDITIONAL BRANCH 


15 14 13 10 0 
1 


12 11 
ms 


[10:0] Immediate Value 


Figure 4-19. Format 18 


OPERATION 
This instruction performs a PC-relative Branch. The THUMB assembler syntax is shown below. The branch offset 


must take account of the prefetch operation, which causes the PC to be 1 word (4 bytes) ahead of the current 
instruction. 


Table 4-19. Summary of Branch Instruction 


B label BAL label (halfword offset) Branch PC relative +/- Offset11 << 1, where label is 
PC +/- 2048 bytes. 


NOTE: The address specified by label is a full 12-bit two's complement address, 
but must always be halfword aligned (ie bit 0 set to 0), since the assembler places label >> 1 in the Offset11 field. 


EXAMPLES 
here B here ; Branch onto itself. Assembles to OxE7FE. 
; (Note effect of PC offset). 
B jimmy ; Branch to ‘jimmy’. 
° ; Note that the THUMB opcode will contain the number of 
° ; halfwords to offset. 
jimmy ° ; Must be halfword aligned. 
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FORMAT 19: LONG BRANCH WITH LINK 


15 14 #13 #12 ~«11 10 0 


Ee Ee ee ee 


[10:0] Long Branch and Link Offset High/Low 


[11] Low/High Offset Bit 
0 = Offset high 
1 = Offset low 


Figure 4-20. Format 19 


OPERATION 
This format specifies a long branch with link. 


The assembler splits the 23-bit two's complement half-word offset specified by the label into two 11-bit halves, 
ignoring bit O (which must be 0), and creates two THUMB instructions. 


Instruction 1 (H = 0) 

In the first instruction the Offset field contains the upper 11 bits of the target address. This is shifted left by 12 bits 
and added to the current PC address. The resulting address is placed in LR. 

Instruction 2 (H =1) 


In the second instruction the Offset field contains an 11-bit representation lower half of the target address. This is 
shifted left by 1 bit and added to LR. LR, which now contains the full 23-bit address, is placed in PC, the address of 
the instruction following the BL is placed in LR and bit 0 of LR is set. 


The branch offset must take account of the prefetch operation, which causes the PC to be 1 word (4 bytes) ahead of 
the current instruction 
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INSTRUCTION CYCLE TIMES 


This instruction format does not have an equivalent ARM instruction. 


Table 4-20. The BL Instruction 


1 temp := next instruction address 
PC :=LR + OffsetLow << 1 
LR := temp | 1 


EXAMPLES 
BL faraway ; Unconditionally Branch to 'faraway' 
next e ; and place following instruction 
° ; address, ie "next", in R14,the Link 
; register and set bit 0 of LR high. 
; Note that the THUMB opcodes will 
; contain the number of halfwords to offset. 
faraway ° ; Must be Half-word aligned. 
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INSTRUCTION SET EXAMPLES 


The following examples show ways in which the THUMB instructions may be used to generate small and efficient 
code. Each example also shows the ARM equivalent so these may be compared. 

MULTIPLICATION BY A CONSTANT USING SHIFTS AND ADDS 

The following shows code to multiply by various constants using 1, 2 or 3 Thumb instructions alongside the ARM 
equivalents. For other constants it is generally better to use the built-in MUL instruction rather than using a sequence 


of 4 or more instructions. 


Thumb ARM 


1. Multiplication by 2n (1,2,4,8.,...) 


LSL Ra, Rb, LSL #n ; MOV Ra, Rb, LSL #n 


2. Multiplication by 24n+1 (3,5,9,17,...) 


LSL Rt, Rb, #n ; ADD Ra, Rb, Rb, LSL #n 
ADD Ra, Rt, Rb 


3. Multiplication by 2n-1 (8,7,15.,...) 


LSL Rt, Rb, #n ; RSB Ra, Rb, Rb, LSL #n 
SUB Ra, Rt, Rb 


4. Multiplication by -24n (-2, -4, -8, ...) 


LSL Ra, Rb, #n ; MOV Ra, Rb, LSL #n 
MVN Ra, Ra ; RSB Ra, Ra, #0 


5. Multiplication by -2’n-1 (-3, -7, -15, ...) 


LSL Rt, Rb, #n ; SUB Ra, Rb, Rb, LSL #n 
SUB Ra, Rb, Rt 


Multiplication by any C = {24n+1, 24n-1, -2n or -24n-1} * 24n 
Effectively this is any of the multiplications in 2 to 5 followed by a final shift. This allows the following additional 
constants to be multiplied. 6, 10, 12, 14, 18, 20, 24, 28, 30, 34, 36, 40, 48, 56, 60, 62 ..... 


(2..5) ; (2..5) 
LSL Ra, Ra, #n ; MOV Ra, Ra, LSL #n 
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GENERAL PURPOSE SIGNED DIVIDE 
This example shows a general purpose signed divide and remainder routine in both Thumb and ARM code. 


Thumb code 


;signed_divide ; Signed divide of R1 by RO: returns quotient in RO, 
; remainder in R1 


;Get abs value of RO into R3 


ASR R2, RO, #31 ; Get 0 or -1 in R2 depending on sign of RO 
EOR RO, R2 ; EOR with -1 (OxFFFFFFFF) if negative 
SUB R3, RO, R2 ; and ADD 1 (SUB -1) to get abs value 


;SUB always sets flag so go & report division by 0 if necessary 


BEQ divide_by_zero 

;Get abs value of R1 by xoring with OxFFFFFFFF and adding 1 if negative 
ASR RO, R1, #31 ; Get 0 or -1 in R83 depending on sign of R1 
EOR R1, RO ; EOR with -1 (OxFFFFFFFF) if negative 
SUB R1, RO ; and ADD 1 (SUB -1) to get abs value 


;Save signs (0 or -1 in RO & R2) for later use in determining ; sign of quotient & remainder. 
PUSH {RO, R2} 


;Justification, shift 1 bit at a time until divisor (RO value) ; is just <= than dividend (R1 value). To do this shift dividend 
; right by 1 and stop as soon as shifted value becomes >. 


LSR RO, R1, #1 
MOV R2, R3 
B %FTO 
just_l LSL R2, #1 
0 CMP R2, RO 
BLS just_l 
MOV RO, #0 ; Set accumulator to 0 
B %FTO ; Branch into division loop 
div_| LSR R2, #1 
0 CMP R1, R2 ; Test subtract 
BCC %FTO 
SUB R1, R2 ; If successful do a real subtract 
0 ADC RO, RO ; Shift result and add 1 if subtract succeeded 
CMP R2, R3 ; Terminate when R2 == R3 (ie we have just 
BNE div_| ; tested subtracting the 'ones' value). 
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Now fix up the signs of the quotient (RO) and remainder (R1) 


ARM Code 
signed_divide 


sip bit 31 = sign of result 


POP 
EOR 
EOR 
SUB 

EOR 
SUB 

MOV 


ANDS 
RSBMI 
EORS 


sip bit 30 = sign of a2 


RSBCS 


{R2, R3} 
R3, R2 
RO, R3 
RO, R3 
R1, R2 
R1, R2 
pe, Ir 


a4, al, #&80000000 
al, al, #0 
ip, a4, a2, ASR #32 


a2, a2, #0 


’ 
’ 


’ 


Get dividend/divisor signs back 
Result sign 
Negate if result sign = - 1 


Negate remainder if dividend sign = - 1 


Effectively zero a4 as top bit will be shifted out later 


;Central part is identical code to udiv (without MOV a4, #0 which comes for free as part of signed entry sequence) 


just_l 


div_| 
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MOVS 
BEQ 


CMP 
MOVLS 
BLO 


CMP 
ADC 
SUBCS 
TEQ 
MOVNE 
BNE 
MOV 
MOVS 
RSBCS 
RSBMI 
MOV 


a3, al 
divide_by_zero 


a3, a2, LSR #1 
a3, a3, LSL #1 
s_ loop 


a2, a3 

a4, a4, a4 
a2, a2, a3 
a3, al 

a3, a3, LSR #1 
s_loop2 

al, a4 

ip, ip, ASL #1 
ai, ai, #0 
a2, a2, #0 
pe, Ir 


’ 


’ 


Justification stage shifts 1 bit at a time 


NB: LSL #1 is always OK if LS succeeds 
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DIVISION BY A CONSTANT 
Division by a constant can often be performed by a short fixed sequence of shifts, adds and subtracts. 


Here is an example of a divide by 10 routine based on the algorithm in the ARM Cookbook in both Thumb and ARM 
code. 


Thumb Code 
udiv10 ; Take argument in a1 returns quotient in a1, 
; remainder in a2 
MOV a2, al 
LSR a3, al, #2 
SUB al,a3 
LSR a3, al, #4 
ADD al, a3 
LSR a3, al, #8 
ADD al, a3 
LSR a3, al, #16 
ADD al, a3 
LSR al, #3 
ASL a3, al, #2 
ADD a3, al 
ASL a3, #1 
SUB a2, a3 
CMP a2, #10 
BLT %FTO 
ADD al, #1 
SUB a2, #10 
0 
MOV pe, Ir 
ARM Code 
udiv10 ; Take argument in a1 returns quotient in a1, 
; remainder in a2 
SUB a2, a1, #10 
SUB al, al, al, Isr #2 
ADD al, al, al, Isr #4 
ADD al, al, al, Isr #8 
ADD al, al, al, Isr #16 
MOV al, al, Isr #3 
ADD a3, al, al, asl #2 
SUBS a2, a2, a3, asl #1 
ADDPL al, al, #1 
ADDMI a2, a2, #10 
MOV pe, Ir 
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NOTES 
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OVERVIEW 


The S3C2410A's memory controller provides memory control signals required for external memory access. 


The $3C2410A has the following features: 


Little/Big endian (selectable by a software) 
Address space: 128Mbytes per bank (total 1GB/8 banks) 
Programmable access size (8/16/32-bit) for all banks except bankO (16/32-bit) 


Total 8 memory banks 
Six memory banks for ROM, SRAM, etc. 
Remaining two memory banks for ROM, SRAM, SDRAM, etc . 


Seven fixed memory bank start address 

Adjustable start address for the last bank. 

Programmable bank size for the last two banks. 
Programmable access cycles for all memory banks 
External wait to extend the bus cycles 

Supporting self-refresh and power down mode for SDRAM 
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MEMORY CONTROLLER $3C2410A 


OM[1:0] = 01,10 OM[1:0] = 00 
OxFFFE_FFFF —> 
0x6000_0000 —» 
SFR Area SFR Area 
0x4800_0000 
0x4000. OFFF —> 
BootSRAM 
0x4000_0000 —» 
SROM/SDRAM SROM/SDRAM 2MB/4MB/8MB/16MB 
(nGCS7) (nGCS7) /32MB/64MB/128MB 
0x3800_0000 —> Refer to 
SROM/SDRAM SROM/SDRAM 
(nGCSé) (nGCS6) 
0x3000_0000 —> 
SROM SROM 
(nGCS5) (nGCS5) 
0x2800_0000 —» 


2MB/4MB/8MB/16MB 
/32MB/64MB/128MB 


Table 5-1 


eee, : 
(nGCS4) (nGCS4) ; 
0x2000_0000 —» este 

(nGCS3) (nGCS3) 
0x1800_0000 —» 

SROM SROM 

a 

0x1000_0000 —» j 


SROM SROM 
(nGCS1) (nGCS1) 
0x0800_0000 —» 
SROM 
Boot Internal 
(nGCSO) 
0x0000_0000 —» SRAM (4KB) 


[Not using NAND flash for boot ROM] [Using NAND flash for boot ROM] 


NOTES: 
1. SROM means ROM or SRAM type memory. 
2. SFR means Special Function Register. 


Figure 5-1. S3C2410A Memory Map after Reset 


Table 5-1. Bank 6/7 Addresses 


Bank 6 


| Start address | 0x3000_0000 0x3000_0000 | 0x3000_0000 | 0x3000_0000 | 0x3000_0000 | 0x3000_0000 | 0x3000_0000 
End address | 0x301f_ffff Ox303t_ffff 0x307t_ffff OxSOff_ffff 0x31 ff_ffff Ox33¢f_ffff Ox37ff_ffff 


Bank 7 


| Start address | 0x3020_0000 0x3040_0000 | 0x3080_0000 | 0x3100_0000 | 0x3200_0000 | 0x3400_0000 | 0x3800_0000 
End address | 0x9803f_ffff 0x307f_ffff Ox3Off_ffff 0x31 ff_ffff Ox33ff_ffff Ox37ff_ffff OxSfff_ffff 


NOTE: Bank 6 and 7 must have the same memory size. 
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FUNCTION DESCRIPTION 


BANKO BUS WIDTH 


The data bus of BANKO (nGCS0) should be configured to either 16-bit or 32-bit accordingly. Because the BANKO 
works as the booting ROM bank (map to 0x0000_0000), the bus width of BANKO should be determined before the 
first ROM access, which will depend on the logic level of OM[1:0] at Reset. 


OM1 (Operating Mode 1) OMO (Operating Mode 0) Booting ROM Data width 
a: ee Fs | 


a GS 


MEMORY (SROM/SDRAM) ADDRESS PIN CONNECTIONS 


MEMORY ADDR. PIN $3C2410A ADDR. $3C2410A ADDR. $3C2410A ADDR. 
@ 8-bit DATA BUS @ 16-bit DATA BUS @ 32-bit DATA BUS 
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SDRAM BANK ADDRESS PIN CONNECTION 
Table 5-2. SDRAM Bank Address Configuration 


a Width Memory Configuration Bank Address 


16Mb 1M x 8x 2banks) x 1 ea A20 


16Mb 2Mx 4x [( 2Mx 4x2banks) x2ea | x2ea A21 
TEE oe a x 16 x 2banks) x 2 ea 
—2 16Mb 
) 1M x 8x 2banks) x 4ea 
64Mb 4M x 8 x 2banks) x 1 ea 


x16 2M x 16 x 2banks) x 1 ea 


x16 ) 1M x 16 x 4banks) x 1 ea A(22:21] 


= x 32 x 4banks) x 1 ea 


[eaten 2a [oes 


[( 1Mx16x4banks) x2ea | 1M x 16x rs x2ea 2 __ 22] 
( 4Mx 8x 4banks) x 1 ea 
|( 2Mx 16x 4banks) xtea | |( 2Mx 16x 4banks) xtea | x 16 x 4banks) x 1 ea 


[abs txctai dea [at 
re ee ae 
Ne 


| 4M x 8 x 4banks) x 2 ea 

ae x2ea 

a oc TREE eae x 1ea 
se eS teats 4M x 8 x 4banks) x 4ea A(25:24] 

{ean odes) eee 8M x 8 x 4banks) x 2 ea 

(ee Menke 62 4M x 16 x 4banks) x 2ea 

ee {6M x 8x 4banks) x1 ea 
[( 8Mx 8x4banks) x4ea 8M x 8 x 4banks) x 4ea A[26:25] 


agi” 
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nWAIT PIN OPERATION 


If the WAIT corresponding to each memory bank is enabled, the nOE duration should be prolonged by the external 
nWAIT pin while the memory bank is active. nNWAIT is checked from tacc-1. NOE will be deasserted at the next 
clock after sampling nWAIT is high. The nWE signal have the same relation with nOE. 


Figure 5-2. S3C2410A External nWAIT Timing Diagram (Tacc = 4) 
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nXBREQ/nXBACK Pin Operation 


L, the address/data bus and 


memory control signals are in Hi-z state as shown in Table 1-1. When nXBREQ is de-asserted, the nXBACK will also 


be de-asserted. 


If nNXBREQ is asserted, the S3C2410A will respond by lowering nXBACK. If nXxBACK 


ep) 
Ss) 
ro} 
c. 
=) 
©, 
Q 


S 
wt 
SF 
< 
Lu 
<< 
e) 
a 


Figure 5-3. S3C2410A nXBREQ/nXBACK Timing Diagram 
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ROM Memory Interface Examples 


Figure 5-4. Memory Interface with 8-bit ROM 


Figure 5-5. Memory Interface with 8-bit ROM x 2 
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nWE |— nWBE2 


nCE |— nGCSn 


Figure 5-6. Memory Interface with 8-bit ROM x 4 


Figure 5-7. Memory Interface with 16-bit ROM 
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SRAM Memory Interface Examples 


Figure 5-9. Memory Interface with 16-bit SRAM x 2 
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SDRAM Memory Interface Examples 


DQO 
DQ1 
DQ2 
DQ3 
DQ4 
DQ5 
DQ6 
DQ7 
DQ8 
DQ9 
DQ10 
DQ11 
DQ12 
DQ13 
DQ14 
DQ15 


nSCS 
SCKE nSRAS 
SCLK nSCAS 
nWE 


Figure 5-10. Memory Interface with 16-bit SDRAM(8MB: 1Mb x 16 x 4banks) 


AO DQO DQO 
Al DQ1 DQ1 
A2 DQ2 DQ2 
A3 DQ3 DQ3 
A4 DQ4 DQ4 
A5 DQ5 DQ5 
A6 DQ6 DQ6 
A7 DQ7 DQ7 
A8 DQ8 DQ8 
AQ DQ9g DQ9 


A10 DQ10 DQ10 
Ait DQ11 DQ11 

DQ12 DQ12 
BAO DQ13 DQ13 
BA1 DQ14 DQ14 
LDQM DQ15 DQ15 


UDQM 
nscsS nSCS 
SCKE nSRAS SCKE nSRAS 
SCLK nSCAS SCLK nSCAS 
nWE nWE 


Figure 5-11. Memory Interface with 16-bit SDRAM (16MB: 1Mb x 16 x 4banks x 2ea) 
NOTE: Refer to Table 5-2 for the Bank Address configurations of SDRAM. 
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PROGRAMMABLE ACCESS CYCLE 


= 2 cycles 


Tacp 


Tacs = 1 cycle 
Tcos = 1 cycle 


Tacc 


Tcoh = 1 cycle 


Tcah 


2 cycles 


n 
a) 
oO 
Pal 
1S) 
ie) 


Figure 5-12. S3C2410A nGCS Timing Diagram 
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‘ 


Ca Ie 
acc 


2, CL =3, BL=1) 


Read (CL 


Bank 
Precharge 


2 cycle 


Tcas = 2 cycle 


Tcp 


= 2 cycle 
= 2 cycle 


Trp 
Tred 


Figure 5-13. S3C2410A SDRAM Timing Diagram 
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BUS WIDTH & WAIT CONTROL REGISTER (BWSCON) 


BWSCON 0x48000000 Bus width & wait status control register 0x000000 


Bwscon | sit | Description | itial state 
ST7 [31] Determine SRAM for using UB/LB for bank 7. 
0 = Not using UB/LB (The pins are dedicated nWBE[3:0]) 
1 = Using UB/LB (The pins are dedicated nBE[3:0]) 
WS7 [30] Determine WAIT status for bank 7. 
0 = WAIT disable 1 = WAIT enable 
DW7 [29:28] | Determine data bus width for bank 7. 
00 = 8-bit 01 = 16-bit, 10 = 32-bit 11 = reserved 
ST6 [27] Determine SRAM for using UB/LB for bank 6. 
0 = Not using UB/LB (The pins are dedicated nWBE[3:0 ) 
1 = Using UB/LB (The pins are dedicated nBE[3:0]) 
WS6 [26] Determine WAIT status for bank 6. 
0 = WAIT disable, 1 = WAIT enable 
DW6 [25:24] | Determine data bus width for bank 6. 
00 = 8-bit 01 = 16-bit, 10 = 32-bit 11 = reserved 
ST5 [23] Determine SRAM for using UB/LB for bank 5. 
0 = Not using UB/LB (The pins are dedicated nWBE[3:0]) 
1 = Using UB/LB (The pins are dedicated nBE[3:0]) 
WS5 [22] Determine WAIT status for bank 5. 
0 = WAIT disable, 1 = WAIT enable 
DW5 [21:20] | Determine data bus width for bank 5. 
00 = 8-bit 01 = 16-bit, 10 = 32-bit 11 = reserved 
ST4 [19] Determine SRAM for using UB/LB for bank 4. 
0 = Not using UB/LB (The pins are dedicated nWBE[3:0]) 
1 = Using UB/LB (The pins are dedicated nBE[3:0]) 
WS4 [18] Determine WAIT status for bank 4. 
0 = WAIT disable 1 = WAIT enable 
DW4 [17:16] | Determine data bus width for bank 4. 
00 = 8-bit 01 = 16-bit, 10 = 32-bit 11 = reserved 
ST3 [15] Determine SRAM for using UB/LB for bank 3. 
0 = Not using UB/LB (The pins are dedicated nWBE[3:0]) 
1 = Using UB/LB (The pins are dedicated nBE[3:0]) 
WS3 [14] Determine WAIT status for bank 3. 
0 = WAIT disable 1 = WAIT enable 
DW3 [13:12] | Determine data bus width for bank 3. 
00 = 8-bit 01 = 16-bit, 10 = 32-bit 11 = reserved 
ST2 [11] Determine SRAM for using UB/LB for bank 2. 
0 = Not using UB/LB (The pins are dedicated nWBE[3:0]) 
1 = Using UB/LB (The pins are dedicated nBE[3:0].) 
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BUS WIDTH & WAIT CONTROL REGISTER (BWSCON) (Continued) 
ewscon [et [———~—~Deseripton——SSSCS*~*~*~*diC at 


[10] Determine WAIT status for bank 2. 
0 = WAIT disable 1 = WAIT enable 


Ba 8] Determine data bus width for bank 2. 
Bae =8-bit 01 = 16-bit, 10 = 32-bit 11 = reserved 
Determine SRAM for using UB/LB for bank 1. 


0 = Not using UB/LB (The pins are dedicated nWBE[3:0]) 
1 = Using UB/LB (The pins are dedicated nBE[3:0]) 


Re WAIT status for bank 1. wa 


i = WAIT disable, 1 = WAIT enable 


[5:4] Determine data bus width for bank 1. 
00 = 8-bit 01 = 16-bit, 10 = 32-bit 11 = reserved 
DWO [2:1] Indicate data bus width for bank 0 (read only). 
01 = 16-bit, 10 = 32-bit 
The states are selected by OM[1:0] pins 


NOTES: 

1. Alltypes of master clock in this memory controller correspond to the bus clock. 
For example, HCLK in SRAM is the same as the bus clock, and SCLK in SDRAM is also the same as the bus 
clock. In this chapter (Memory Controller), one clock means one bus clock. 

2. nBE[3:0] is the 'AND' signal nWBE[3:0] and nOE. 
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BANK CONTROL REGISTER (BANKCONN: nGCS0-nGCS5) 


Tacs [14:13] | Address set-up time before nGCSn 
00 = 0 clock 01 = 1 clock 
10 = 2 clocks 11 = 4 clocks 
[12:11] | Chip selection set-up time before nOE 
00 = 0 clock 01 = 1 clock 
10 = 2 clocks 11 = 4 clocks 


[7:6] Chip selection hold time after nOE 
00 = 0 clock 01 = 1 clock 
10 = 2 clocks 11 = 4 clocks 
[5:4] Address hold time after nGCSn 
00 = 0 clock 01 = 1 clock 
10 = 2 clocks 11 = 4 clocks 
[3:2] Page mode access cycle @ Page mode 
00 = 2 clocks 01 = 3 clocks 
10 = 4 clocks 11 = 6 clocks 


[1:0] Page mode configuration 
00 = normal (1 data) 01=4data 
10 = 8 data 11 = 16 data 


[10:8] | Access cycle 111 
000 = 1 clock 001 = 2 clocks 
010 = 3 clocks 011 = 4 clocks 
100 = 6 clocks 101 = 8 clocks 
110 = 10 clocks 111 = 14 clocks 
NOTE: When nWAIT signal is used, Tacc = 4 clocks. 
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BANK CONTROL REGISTER (BANKCONn: nGCS6-nGCS7) 


BANKCON6 0x4800001C Bank 6 control register 0x18008 
BANKCON7 0x48000020 Bank 7 control register 0x18008 


MT [16:15] | Determine the memory type for bank6 and bank7. 
00 = ROM or SRAM 01 = Reserved (Do not use) 
10 = Reserved (Do not use) 11 = Sync. DRAM 


Memory Type = ROM or SRAM [MT=00] (15-bit) 


Tacs [14:13] | Address set-up time before nGCS 
00 = 0 clock 01=1clock 10=2clocks 
clocks 

Tcos [12:11] | Chip selection set-up time before nOE 
00 = 0 clock 01=1clock 10=2clocks 
clocks 


Tacc [10:8] | Access cycle 
000 = 1 clock 001 = 2 clocks 
010 = 3 clocks 011 = 4 clocks 
100 = 6 clocks 101 = 8 clocks 
110 = 10 clocks 111 = 14 clocks 
Tcoh [7:6] Chip selection hold time after nNOE 
00 = 0 clock 01 =1 clock 
10 = 2 clocks 11 = 4 clocks 
Tcah [5:4] Address hold time after nGCSn 
00=Oclock 01=i1clock 10=2clocks 11 =4clocks 
Tacp [3:2] | Page mode access cycle @ Page mode 
00 = 2 clocks 01 = 3 clocks 
10 = 4 clocks 11 = 6 clocks 
PMC [1:0] Page mode configuration 
00 = normal (1 data) 01 = 4 consecutive accesses 
10 = 8 consecutive accesses 11 = 16 consecutive accesses 
Memory Type = SDRAM [MT=11] (4-bit) 


Tred [3:2] RAS to CAS delay 

00=2clocks 01=3clocks 10=4clocks 
SCAN [1:0] Column address number 

00 = 8-bit 01 = 9-bit 10= 10-bit 
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REFRESH CONTROL REGISTER 


REFRESH 0x48000024 SDRAM refresh control register Oxac0000 


REFEN [23] SDRAM Refresh Enable 
0 = Disable 1 = Enable (self/auto refresh) 


TREFMD [22] SDRAM Refresh Mode 
0 = Auto Refresh 1 = Self Refresh 
In self-refresh time, the SDRAM control signals are driven to the 
appropriate level. 


Trp [21:20] | SDRAM RAS pre-charge Time 
00=2clocks 01 =3clocks 10 = 4 clocks 11 = Not support 


Tsrc [19:18] | SDRAM Semi Row Cycle Time 
00 =4 clocks 01=5clocks 10=6clocks 11 =7 clocks 
SDRAM's Row-Cycle time(Trc) = Tsrc + Trp 
If) Trp=3 clocks & Tsrc=7 clocks, Trc = 3 + 7 = 10 clocks 


fReseved [tag [Nowe SSCSCSC“~‘“‘“S*S*~*~—dSC‘ 
5: 00 


Refresh : SDRAM refresh count value. 
Counter Refresh period = (2'1-refresh_count+1)/HCLK 


Ex) If refresh period is 15.6 us and HCLK is 60 MHz, 
the refresh count is as follows: 
Refresh count = 2'1 + 1 - 60x15.6 = 1113 


ELECTRONICS 5-17 


MEMORY CONTROLLER $3C2410A 


BANKSIZE REGISTER 


BANKSIZE 0x48000028 Flexible bank size register 0x0 


ss EN ARM core burst operation enable. 
0 = Disable burst operation. 
1 = Enable burst operation. 


fResened | [NtwesSSOSCSC~—SC“SsS~—SsS~iS 


SCKE_EN [5] SCKE enable control 
0 = SDRAM SCKE disable 
1 = SDRAM SCKE enable 


SCLK_EN [4] SCLK is enabled only during SDRAM access cycle for reducing 
power consumption. When SDRAM is not accessed, SCLK 
becomes 'L' level. 

0 = SCLK is always active. 
1 = SCLK is active only during the access (recommended). 


BK76MAP [2:0] BANK6/7 memory map 010 
010 = 128MB/128MB 001 = 64MB/64MB 
000 = 32M/32M 111 = 16M/16M 
110 = 8M/8M 101 = 4M/4M 
100 = 2M/2M 
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SDRAM MODE REGISTER SET REGISTER (MRSR) 


MRSRB6 0x4800002C Mode register set register bank6 
MRSRB7 0x48000030 Mode register set register bank7 


aii [Ned SSCSC—~“‘*‘“S*S*s*“‘“~*S*sdSSCS 


WBL Write burst length 
0: Burst (Fixed) 
1: Reserved 


T™ [8:7] Test mode XX 
00: Mode register set (Fixed) 
01, 10 and 11: Reserved 

CL [6:4] CAS latency XXX 
000 =1clock, 010 =2clocks, 011=3 clocks 
Others: reserved 

BT [3] Burst type Xx 
0: Sequential (Fixed) 
1: Reserved 

BL [2:0] Burst length XXX 
000: 1 (Fixed) 
Others: Reserved 


NOTE: MRSR register must not be reconfigured while the code is running on SDRAM. 


IMPORTANT NOTES 
In Power_OFF mode, SDRAM has to enter SDRAM self-refresh mode. 
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NOTES 
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NAND FLASH CONTROLLER 


OVERVIEW 


Recently, a NOR flash memory gets high in price while an SDRAM and a NAND flash memory get moderate, 
motivating some users to execute the boot code on a NAND flash and execute the main code on an SDRAM. 


$3C2410A boot code can be executed on an external NAND flash memory. In order to support NAND flash boot 
loader, the S38C2410A is equipped with an internal SRAM buffer called "Steppingstone". When booting, the first 4 
KBytes of the NAND flash memory will be loaded into Steppingstone and the boot code loaded into Steppingstone 
will be executed. 


Generally, the boot code will copy NAND flash content to SDRAM. Using hardware ECC generating, the NAND flash 
data validity will be checked. Upon the completion of the copy, the main program will be executed on the SDRAM. 


FEATURES 


e NAND Flash mode: Support read/erase/program NAND flash memory 


e Auto boot mode : The boot code is transferred into Steppingstone after reset. After the transfer, the boot code 
will be executed on the Steppingstone. 


e Hardware ECC generating block (for hardware generating and software correcting) 


e The Steppingstone 4-KB internal SRAM buffer can be used for another purpose after NAND flash booting. 
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BLOCK DIAGRAM 


System Bus 


Internal 


puter Buffer 


Control 


Control 
State 
Machine 


Register 
Bank 


CLE 

ALE 

Ecc nCE 

Encoder/ litre aay Wie 
Decoder me 
R/nB 


/00~1/O7 


Figure 6-1. NAND Flash Controller Block Diagram 


OPERATION SCHEME 


Auto Boot Mode 
CPU Access 


(Boot Code) 


Steppingstone 
(4 KB Buffer) 


NAND Flash 


Controller 
User Access 


Special Function 
Registers 


NAND Flash Mode 


Figure 6-2. NAND Flash Operation Scheme 
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AUTO BOOT MODE SEQUENCE 


Reset is completed. 


When the auto boot mode is enabled, the first 4 KBytes of NAND flash memory is copied onto Steppingstone 4- 
KB internal buffer. 


The Steppingstone is mapped to nGCSO. 


CPU starts to execute the boot code on the Steppingstone 4-KB internal buffer. 


NOTE 
In the auto boot mode, ECC is not checked. So, The first 4 KBytes of NAND flash should have no bit error. 


NAND FLASH MODE CONFIGURATION 


FO 


Set NAND flash configuration by NFCONF register. 
Write NAND flash command onto NFCMD register. 
Write NAND flash address onto NFADDR register. 


Read/Write data while checking NAND flash status by NFSTAT register. R/nB signal should be checked before 
read operation or after program operation. 


NAND FLASH MEMORY TIMING 


Figure 6-3. TACLS = 0, TWRPHO = 1, TWRPH1 = 0 
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PIN CONFIGURATION 


D[7:0] : Data/Command/Address In/Out Port (shared with the data bus) 
CLE : Command Latch Enable (Output) 

ALE : Address Latch Enable (Output) 

nFCE : NAND Flash Chip Enable (Output) 

nFRE : NAND Flash Read Enable (Output) 

nFWE : NAND Flash Write Enable (Output) 

R/nB : NAND Flash Ready/nBusy (Input) 


BOOT AND NAND FLASH CONFIGURATIONS 


1. OM[1:0] = 00b : Enable NAND flash controller auto boot mode 
NAND flash memory page size should be 512Bytes. 
NCON : NAND flash memory address step selection 


0 : 3 Step addressing 
1:4 Step addressing 


512-BYTE ECC PARITY CODE ASSIGNMENT TABLE 


J earar | pavas [paras [ataa | paras | patat | patat | DaTAD | 


$3C2410A generates 512-Byte ECC Parity Code during Write/Read operation. ECC Parity Code consists of 3 Bytes 
per 512-Byte data. 


24-bit ECC Parity Code = 18-bit Line parity + 6-bit Column Parity 
ECC generator block executes the followings: 


1. When MCU writes data to NAND, the ECC generator block generates ECC code. 


2. When MCU reads data from NAND, the ECC generator block generates ECC code and users compare it with 
pre-written ECC code. 
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NAND FLASH MEMORY MAPPING 


OxFFFF_FFFF 
0x6000_ 0000 
SFR Area SFR Area 
0x4800_ 0000 
0x4000_ 0000 SRB YISS) 
SDRAM SDRAM 
(BANK7, nGCS7) (BANK7, nGCS7) 
0x3800_ 0000 
SDRAM SDRAM 
(BANK6, nGCS6) (BANK6, nGCS6) 
0x3000_ 0000 
SROM SROM 
(BANKS, nGCS5) (BANKS, nGCS$5) 
0x2800_ 0000 
SROM SROM 
(BANK4, nGCS4) (BANK4, nGCS4) 
0x2000_ 0000 


SROM SROM 
(BANK3, nGCS3) (BANK3, nGCS3) 
0x1800_0000 
SROM SROM 
(BANK2, nGCS2) (BANK2, nGCS2) 
0x1000_0000 
SROM SROM 
(BANK1, nGCS1) (BANK1, nGCS1) 
0x0800_0000 
fami neeso) ee 
on 
0x0000_ 0000 oben) 


OM[1:0] == 01, 10 OM[1:0] == 00 


a) Not using NAND flash a) Using NAND flash for 
for booting ROM booting ROM 


NOTE: SFR means Special Function Register. 


Figure 6-4. NAND Flash Memory Mapping 


ELECTRONICS 6-5 


NAND FLASH CONTROLLER S3C2410A 


SPECIAL FUNCTION REGISTERS 


NAND FLASH CONFIGURATION (NFCONF) REGISTER 


NFCONF | 0x4E000000 NAND flash configuration =a 


Enable/Disable NAND flash controller enable/disable 


0 = Disable NAND Flash Controller 
1 = Enable NAND Flash Controller 


After auto-boot, this bit is cleared to 0 automatically. 
For the access to the NAND flash memory, this bit must 
be set. 


Initialize ECC Initialize ECC decoder/encoder 
0 : Not initialize ECC 1: Initialize ECC 


(S3C2410A supports only 512-Byte ECC checking, so it is 
required to set ECC initialization per 512 Bytes.) 


NAND Flash Memory NAND flash memory nFCE control 


chip enable 0: NAND flash nFCE = L (active) 
1: NAND flash nFCE = H (inactive) 


(After auto-boot, nFCE will be inactive.) 


TACLS [10:8] | CLE & ALE duration setting value (0~7) 
Duration = HCLK * (TACLS + 1) 


TWRPHO [6:4] TWRPHO duration setting value (0~7) 
Duration = HCLK * (TWRPHO + 1) 


TWRPH1 [2:0] TWRPH1 duration setting value (0~7) 
Duration = HCLK * (TWRPH1 + 1) 


fReceved ———OSSC~*C sense SSCSC“~—~‘iSSC 
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NAND FLASH COMMAND SET (NFCMD) REGISTER 


NFCMD 0x4E000004 NAND flash command set register P= 


sa] Reed CSC~“*~*~“‘—*~*S*S*srSCSCtiSC*d 
[7:0] NAND flash memory command value 


NAND FLASH ADDRESS SET (NFADDR) REGISTER 


NFADDR 0x4E000008 NAND flash address set register ; ee 


(se) [Reed SOSOSC~S~S 


[7:0] NAND flash memory address value 


NAND FLASH DATA (NFDATA) REGISTER 


NFDATA 0x4E00000C NAND flash data register oe 


ise) [Resed —SSSCSC~“‘*‘~S*S*‘“‘~*é~dCSCiSCS 


[7:0] NAND flash read/program data value 
In case of write: Programming data 
In case of read: Read data. 
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NAND FLASH OPERATION STATUS (NFSTAT) REGISTER 


NFSTAT 0x4E000010 | oR | NAND flash operation status LS} 


a6 


RnB NAND flash memory ready/busy status. 
(This signal is checked through R/nB pin.) 
0 = NAND flash memory busy 
1 = NAND flash memory ready to operate 


NAND FLASH ECC (NFECC) REGISTER 


NFECC 0x4E000014 | oR | NAND flash ECC (Error Correction Code) register fF 


ECC2 [23:16] | Error Correction Code #2 


ECC1 [15:8] | Error Correction Code #1 Pe 
ECCO [7:0] Error Correction Code #0 Pe 


Known Problems 
e Problem : NAND flash controller can't be accessed by DMA. 
e Solution : Instead of DMA, use LDM/STM Instructions like our boot loader example code. 
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CLOCK & POWER MANAGEMENT 


OVERVIEW 


The clock & power management block consists of three parts: clock control, USB control, and power control. 


The Clock control logic in S8C2410A can generate the required clock signals including FCLK for CPU, HCLK for the 
AHB bus peripherals, and PCLK for the APB bus peripherals. The S8C2410A has two Phase Locked Loops (PLLs): 
one for FCLK, HCLK, and PCLK, and the other dedicated for USB block (48MHz). The clock control logic can make 
slow clocks without PLL and connect/disconnect the clock to each peripheral block by software, which will reduce 
the power consumption. 


For the power control logic, the S8C2410A has various power management schemes to keep optimal power 
consumption for a given task. The power management block in the S3C2410A can activate four modes: NORMAL 
mode, SLOW mode, IDLE mode, and Power_OFF mode. 


NORMAL mode: the block supplies clocks to CPU as well as all peripherals in the S8C2410A. In this mode, the 
power consumption will be maximized when all peripherals are turned on. It allows the user to control the operation of 
peripherals by software. For example, if a timer is not needed, the user can disconnect the clock to the timer to 
reduce power consumption. 


SLOW mode: Non-PLL mode. Unlike the Normal mode, the Slow mode uses an external clock (XTIpll or EXTCLK) 
directly as FOLK in the S3C2410A without PLL. In this mode, the power consumption depends on the frequency of 
the external clock only. The power consumption due to PLL is excluded. 


IDLE mode: the block disconnects clocks (FCLK) only to the CPU core while it supplies clocks to all other 
peripherals. The IDLE mode results in reduced power consumption due to CPU core. Any interrupt request to CPU 
can be woken up from the Idle mode. 


Power_OFF mode: the block disconnects the internal power. So, there occurs no power consumption due to CPU 
and the internal logic except the wake-up logic in this mode. Activating the Power_OFF mode requires two 
independent power sources. One of the two power sources supplies the power for the wake-up logic. The other one 
supplies other internal logics including CPU, and should be controlled for power on/off. In the Power_OFF mode, the 
second power supply source for the CPU and internal logics will be turned off. The wakeup from Power_OFF mode 
can be issued by the EINT[15:0] or by RTC alarm interrupt. 
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FUNCTIONAL DESCRIPTION 


CLOCK ARCHITECTURE 


Figure 7-1 shows a block diagram of the clock architecture. The main clock source comes from an external crystal 
(XTIpll) or an external clock (EXTCLK). The clock generator includes an oscillator (Oscillation Amplifier), which is 
connected to an external crystal, and also has two PLLs (Phase-Locked-Loop), which generate the high frequency 
clock required in the S8C2410A. 


CLOCK SOURCE SELECTION 


Table 7-1 shows the relationship between the combination of mode control pins (OM3 and OM2) and the selection of 
source clock for the S3C2410A. The OM[3:2] status is latched internally by referring the OM3 and OM2 pins at the 
rising edge of NRESET. 


Table 7-1. Clock Source Selection at Boot-Up 


Mode OM[3:2] MPLL State UPLL State Main Clock source | USB Clock Source 
Fm |S stsl =| stl 


NOTES: 

1. Although the MPLL starts just after a reset, the MPLL output (Mpll) is not used as the system clock until the software 
writes valid settings to the MPLLCON register. Before this valid setting, the clock from external crystal or EXTCLK source 
will be used as the system clock directly. Even if the user does not want to change the default value of MPLLCON 
register, the user should write the same value into MPLLCON register. 

2. OM[3:2] is used to determine a test mode when OM[1:0] is 11. 
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OM[3:2] 
MPLL CLK 


XTIpll ' pH SRS Sea ce Soe Rae aE SSeS ae 
XTOpl" | OSC 


<i 
EXTCLK Fa MPLL ei CLKCNTL 


FCLK 


HDIVN || PDIVN 
Control [Esco c 


1 UPLL CLK 


Power 
Management 


I_FCLK ARM920T 
PCLK 


Memory Interrupt 
Controller Controller 
YH | LCD 
Bus LCD 
Controller Controller 


Arbitration 
DMA 4ch 


Figure 7-1. Clock Generator Block Diagram 
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PHASE LOCKED LOOP (PLL) 


The MPLL within the clock generator, as a circuit, synchronizes an output signal with a reference input signal in 
frequency and phase. In this application, it includes the following basic blocks as shown in Figure 7-2: the Voltage 
Controlled Oscillator (VCO) to generate the output frequency proportional to input DC voltage, the divider P to divide 
the input frequency (Fin) by p, the divider M to divide the VCO output frequency by m which is input to Phase 
Frequency Detector (PFD), the divider S to divide the VCO output frequency by s which is Mpll (the output frequency 
from MPLL block), the phase difference detector, the charge pump, and the loop filter. The output clock frequency 
Mpll is related to the reference input clock frequency Fin by the following equation: 


Mpll = (m * Fin) / (p * 2) 
m = M (the value for divider M)+ 8, p = P (the value for divider P) + 2 


The UPLL within the clock generator is the same as the MPLL in every aspect. 


The following sections describe the operation of the PLL, including the phase difference detector, the charge pump, 
the Voltage controlled oscillator (VCO), and the loop filter. 

Phase Frequency Detector (PFD) 

The PFD monitors the phase difference between Fref and Fvco, and generates a control signal (tracking signal) when 
it detects a difference. The Fref means the reference frequency as shown in the Figure 7-2. 

Charge Pump (PUMP) 

The charge pump converts PFD control signals into a proportional charge in voltage across the external filter that 
drives the VCO. 

Loop Filter 


The control signal, which the PFD generates for the charge pump, may generate large excursions (ripples) each time 
the Fvco is compared to the Fref. To avoid overloading the VCO, a low pass filter samples and filters the high- 
frequency components out of the control signal. The filter is typically a single-pole RC filter with a resistor and a 
capacitor. 


Voltage Controlled Oscillator (VCO) 


The output voltage from the loop filter drives the VCO, causing its oscillation frequency to increase or decrease 
linearly as a function of variations in average voltage. When the Fvco matches Fref in terms of frequency as well as 
phase, the PFD stops sending control signals to the charge pump, which in turn stabilizes the input voltage to the 
loop filter. The VCO frequency then remains constant, and the PLL remains fixed onto the system clock. 


Usual Conditions for PLL & Clock Generator 


PLL & Clock Generator generally uses the following conditions. 


Loop filter capacitance 
External X-tal frequency 10 — 20 MHz (note) 


External capacitance used for X-tal 15 — 22 pF 


NOTES: 
1. The value could be changed. 
2. FCLK must be more than three times X-tal or EXTCLK (FCLK = 3X-tal or 3EXTCLK) 
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MPLLCAP, 
UPLLCAP 


— Fret Loop Filter 


P[5:0] 


Fvco 
Divider 
M[7:0] ——————————_» Internal | External 
Divider 
S[1:0] MPLL,UPLL 


Figure 7-2. PLL (Phase-Locked Loop) Block Diagram 


External 
OSC 


a) X-TAL Oscillation (OM[3:2]=00) b) External Clock Source (OM[3:2]=11) 


Figure 7-3. Main Oscillator Circuit Examples 
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CLOCK CONTROL LOGIC 


The clock control logic determines the clock source to be used, i.e., the PLL clock (Mpll) or the direct external clock 
(XTIpll or EXTCLK). When PLL is configured to a new frequency value, the clock control logic disables the FCLK until 
the PLL output is stabilized using the PLL locking time. The clock control logic is also activated at power-on reset 
and wakeup from power-down mode. 


Power-On Reset (XTIpll) 


Figure 7-4 shows the clock behavior during the power-on reset sequence. The crystal oscillator begins oscillation 
within several milliseconds. When nRESET is released after the stabilization of OSC (XTIpIll) clock, the PLL starts to 
operate according to the default PLL configuration. However, PLL is commonly known to be unstable after power-on 
reset, so Fin is fed directly to FCLK instead of the Mpll (PLL output) before the software newly configures the 
PLLCON. Even if the user does not want to change the default value of PLLCON register after reset, the user should 
write the same value into PLLCON register by software. 


The PLL restarts the lockup sequence toward the new frequency only after the software configures the PLL with a 
new frequency. FCLK can be configured as PLL output (Mpll) immediately after lock time. 


Power J 


ig PLL can operate after OM[3:2] is latched. 


nRESET 
OSC 
(XTIpll) 


y PLL is configured by S/W first time. 


Clock 
: <+4#_______ >» 
Disable Lock Time 


y VCO is adapted to new clock frequency. 


VCO 


a— The logic operates by XTIpll ee FCLK is new frequency 


Figure 7-4. Power-On Reset Sequence (when the external clock source is a crystal oscillator) 
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Change PLL Settings In Normal Operation Mode 


During the operation of the S8C2410A in NORMAL mode, the user can change the frequency by writing the PMS 
value and the PLL lock time will be automatically inserted. During the lock time, the clock is not supplied to the 
internal blocks in the S3C2410A. Figure 7-5 shows the timing diagram. 


LU PMS setting 


FCLK 
It changes to new PLL clock 


after automatic lock time. 


Figure 7-5. Changing Slow Clock by Setting PMS Value 


USB Clock Control 


USB host interface and USB device interface needs 48Mhz clock. In the S8C2410A, the USB dedicated PLL (UPLL) 
generates 48MHz for USB. UCLK does not fed until the PLL (UPLL) is configured. 


After reset XTIpll or EXTCLK 


After configuring UPLL L: during PLL lock time On 
48MHz: after PLL lock time 


UPLL is turned off by CLKSLOW register XTipll or EXTCLK 
UPLL is turned on by CLKSLOW register 48MHz 
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FCLK, HCLK, and PCLK 


FCLK is used by ARM920T. 

HCLK is used for AHB bus, which is used by the ARM920T, the memory controller, the interrupt controller, the LCD 
controller, the DMA and the USB host block. 

PCLK is used for APB bus, which is used by the peripherals such as WDT, IIS, 12C, PWM timer, MMC interface, 
ADC, UART, GPIO, RTC and SPI. 


The S3C2410A supports selection of Dividing Ratio between FCLK, HLCK and PCLK. This ratio is determined by 
HDIVN and PDIVN of CLKDIVN control register. 


HDIVN1 HDIVN PDIVN FCLK HCLK PCLK 


FCLK FCLK FCLK 
eka 


St FCLK FOLK | FCLK/2 ie 


FCLK FCLK / 2 FCLK / 2 


FCLK FCLK / 2 FCLK / 4 12:4 
peecene 


FCLK FCLK / 4 FCLK / 4 


After setting PMS value, it is required to set CLKDIVN register. The setting value of CLKDIVN will be valid after PLL 
lock time. The value is also available for reset and changing Power Management Mode. 

The setting value can also be valid after 1.5 HCLK. Only, 1HCLK can validate the value of CLKDIVN register changed 
from Default (1:1:1) to other Divide Ratio (1:1:2, 1:2:2, 1:2:4 and 1:4:4) 


FCLK 


' 
\ 

CLKDIVN 0x00000000 0x00000001(1:1:2) 0x00000003 (1:2:4) ‘ 0x0000004)0 (1:1:1) 
i) 


HCLK | | | | | 


PCLK 
‘¢—>' 1 HCLK '¢—>»_ 1.5 HCLK ¢—————— >} 1.5 HCLK 


Figure 7-6. Changing CLKDIVN Register Value 


NOTES 


CLKDIVN should be set carefully not to exceed the limit of HCLK and PCLK. 
2. If HDIVN = 1, the CPU bus mode has to be changed from the fast bus mode to the asynchronous bus 
mode using following instructions. 


— 


MMU_SetAsyncBusMode 
mre pl5,0,r0,cl1,c0,0 
orr 4r0,r0,#R1_nF:OR:R1I_iA 
mcr pl5,0,r0,cl1,c0,0 


If HDIVN=1 and the CPU bus mode is the fast bus mode, the CPU will operate by the HCLK. This feature 
can be used to change the CPU frequency as a half without affecting the HCLK and PCLK. 
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POWER MANAGEMENT 


The power management block controls the system clocks by software for the reduction of power consumption in the 
S3C2410A. These schemes are related to PLL, clock control logics (FCLK, HCLK, and PCLK) and wakeup signals. 
Figure 7-7 shows the clock distribution of the S8C2410A. 


The S3C2410A has four power modes. The following section describes each power management mode. The 
transition between the modes is not allowed freely. For available transitions among the modes, see Figure 7-8. 


Clock Control 
Register 


Jt 


Input Clock Power 
oo > 
Management 


UCLK (48 MHz 


FCLK defination 


If SLOW mode 
FCLK = input clock/divider ratio 


Nand Flash 
If Normal mode (P, M & S value) Controller 


FCLK = MPLL clock (Mpll) 


Device 


Figure 7-7. The Clock Distribution Block Diagram 
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IDLE_BIT=1 


Interrupts, EINT[0:23], RTC alarm 


NORMAL 
(SLOW_BIT=0) 
EINT[15:0], 
RTC alarm 
SLOW 


ae POWER _OFF BIT=1 
= — POWER_OFF 


Figure 7-8. Power Management State Diagram 


Table 7-2. Clock and Power State in Each Power Mode 


ARM920T | AHB Modules (1) Power APB Modules (2) 
/WDT Management & USBH/LCD/NAND 


a ee 
| o 
Ee 
OFF 


Wait for wake- 
up event 


a a a 
poo | Oo 


NOTES: 

1. USB host,LCD, and NAND are excluded. 

2. WOT is excluded. RTC interface for CPU access is included. 

3. SEL:selectable(O,X), O: enable , X: disable OFF: power is turned off 
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NORMAL Mode 


In normal mode, all peripherals and the basic blocks including power management block, the CPU core, the bus 
controller, the memory controller, the interrupt controller, DMA, and the external master may operate fully. But, the 
clock to each peripheral, except the basic blocks, can be stopped selectively by software to reduce the power 
consumption. 


IDLE Mode 


In IDLE mode, the clock to the CPU core is stopped except the bus controller, the memory controller, the interrupt 
controller, and the power management block. To exit the IDLE mode, EINT[23:0], or RTC alarm interrupt, or the other 
interrupts should be activated. (EINT is not available until GPIO block is turned on). 


SLOW Mode (Non-PLL Mode) 


Power consumption can be reduced in the SLOW mode by applying a slow clock and excluding the power 
consumption from the PLL. The FCLK is the frequency of divide_by_n of the input clock (XTIpll or EXTCLK) without 
PLL. The divider ratio is determined by SLOW_VAL in the CLKSLOW control register and CLKDIVN control register. 


Table 7-3. CLKSLOW and CLKDIVN Register Settings for SLOW Clock 


SLOW_VAL FCLK HCLK PCLK UCLK 
1/1 Option 1/2 Option 1/1 Option 1/2 Option 
(HDIVN=0) | (HDIVN=1) | (PDIVN=0) | (PDIVN = 1) 
EXTCLK or EXTCLK or EXTCLK or HCLK HCLK / 2 48 MHz 
XTIpll / 1 XTIpll / 1 XTIpll / 2 
001 EXTCLK or EXTCLK or EXTCLK or HCLK HCLK / 2 48 MHz 
XTIpll / 2 XTIpll / 2 XTIpll / 4 
010 EXTCLK or EXTCLK or EXTCLK or HCLK HCLK / 2 48 MHz 
XTIpll / 4 XTIpll / 4 XTIpll / 8 


011 EXTCLK or | EXTCLKor | EXTCLKor HCLK HCLK / 2 
XTIpll / 6 XTIpll / 6 XTIpll / 12 

100 EXTCLK or | EXTCLKor | EXTCLKor HCLK HCLK / 2 
XTIpll / 8 XTIpll / 8 XTIpll / 16 

101 EXTCLK or | EXTCLKor | EXTCLKor HCLK HCLK / 2 
XTIpll / 10 XTIpll / 10 XTIpll / 20 

110 EXTCLK or | EXTCLKor | EXTCLKor HCLK HCLK / 2 
XTIpll / 12 XTIpll / 12 XTIpll / 24 

1114 EXTCLK or | EXTCLKor | EXTCLKor HCLK HCLK / 2 
XTIpll / 14 XTIpll / 14 XTIpll / 28 


In SLOW mode, PLL will be turned off to reduce the PLL power consumption. When the PLL is turned off in the 
SLOW mode and the user changes power mode from SLOW mode to NORMAL mode, the PLL needs clock 
stabilization time (PLL lock time). This PLL stabilization time is automatically inserted by the internal logic with lock 
time count register. The PLL stability time will take 150us after the PLL is turned on. During PLL lock time, the FCLK 
becomes SLOW clock. 
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Users can change the frequency by enabling SLOW mode bit in CLKSLOW register in PLL on state. The SLOW 
clock is generated during the SLOW mode. Figure 7-9 shows the timing diagram. 


Mpll 
SLOW_BIT on Slow mode enable R_ Slow mode disable 


MPLL_OFF 


FCLK | 
Divided external clock It changes to PLL clock 


after slow mode off 


Figure 7-9. Issuing Exit_from_Slow_mode Command in PLL on State 


If the user switches from SLOW mode to Normal mode by disabling the SLOW_BIT in the CLKSLOW register after 
PLL lock time, the frequency is changed just after SLOW mode is disabled. Figure 7-10 shows the timing diagram. 


Software lock time 


}¢—______—>| 
Moll | | | 


SLOW_BIT ie Slow mode enable Slow mode disable —* 


MPLL_OFF iy PLLoff ®_ PLL on 


FCLK 
Divided OSC clock It changes to PLL clock 


after slow mode off 


Figure 7-10. Issuing Exit_from_Slow_mode Command After Lock Time 
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If the user switches from SLOW mode to Normal mode by disabling SLOW_BIT and MPLL_OFF bit simultaneously 
in the CLKSLOW register, the frequency is changed just after the PLL lock time. Figure 7-11 shows the timing 
diagram. 


Hardware lock time 


}¢—______>| 
Moll | | | 


SLOW_BIT am Slow mode enable |®— Slow mode disable 


MPLL_OFF iy PLL off ®_ PLL on 


FCLK 
Divided It changes to PLL clock 


OSC clock after lock time automatically 


Figure 7-11. Issuing Exit_from_Slow_mode Command and the Instant PLL_on Command Simultaneously 
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Power_OFF Mode 


The block disconnects the internal power. So, there occurs no power consumption due to CPU and the internal logic 
except the wake-up logic in this mode. Activating the Power_OFF mode requires two independent power sources. 
One of the two power sources supplies the power for the wake-up logic. The other one supplies other internal logics 
including CPU, and should be controlled for power on/off. In the Power_OFF mode, the second power supply source 
for the CPU and internal logics will be turned off. The wakeup from Power_OFF mode can be issued by the 
EINT[15:0] or by RTC alarm interrupt. 

Procedure to Enter Power_OFF mode 

1. Set the GPIO configuration adequate for Power_OFF mode. 


2. Mask all interrupts in the INTMSK register. 
Configure the wake-up sources properly including RTC alarm. 
The bit of EINTMASK corresponding to the wake-up source has not to be masked in order to let the 
corresponding bit of SRCPND or EINTPEND set. Although a wake-up source is issued and the corresponding 
bit of EINTMASK is masked, the wake-up will occur and the corresponding bit of SRCPND or EINTPEND will 
not be set. 


4. Set USB pads as suspend mode. (MISCCR[13:12]=1 1b) 
5. Save some meaning values into GSTATUS3,4 register. These register are preserved during Power_OFF mode. 


6. Configure MISCCR[1:0] for the pull-up resisters on the data bus,D[31:0]. If there is an external BUS holder, such 
as 74LVCH162245, turn off the pull-up resistors. If not, turn on the pull-up resistors 


7. Stop LCD by clearing LCDCON1.ENVID bit. 

8. Read rREFRESH and rCLKCON registers in order to fill the TLB. 

9. Let SDRAM enter the self-refresh mode by setting the REFRESH[22]=1b. 
10. Wait until SDRAM self-refresh is effective. 


11. Set MISCCR[19:17]=111b to make SDRAM signals (SCLKO,SCLK1 and SCKE) protected during Power_OFF 
mode 


12. Set the Power_OFF mode bit in the CLKCON register. 
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Procedure to Wake-up from Power_OFF mode 


ls 


oa fF & 


The internal reset signal will be asserted if one of the wake-up sources is issued. This reset duration is 
determined by the internal 16-bit counter logic and the reset assertion time is calculated as tRST = (65535 / 
XTAL_frequency). 


Check GSTATUS2[2] in order to know whether or not the power-up is caused by the wake-up from Power_OFF 
mode. 


Release the SDRAM signal protection by setting MISCCR[19:17]=000b. 
Configure the SDRAM memory controller. 
Wait until the SDRAM self-refresh is released. Mostly SDRAM needs the refresh cycle of all SDRAM row. 


The information in GSTATUS3,4 can be used for user's own purpose because the value in GSTATUS3,4 has 
been preserved during Power_OFF mode. 


— For EINT[3:0], check the SRCPND register. 

— For EINT[15:4], check the EINTPEND instead of SRCPND (SRCPND will not be set although some bits of 
EINTPEND are set.). 

— For alarm wake-up, check the RTC time because the RTC bit of SRCPND isn't set at the alarm wake-up. 

— If there was the nBATT_FLT assertion during POWER_OFF mode, the corresponding bit of SRCPND has 
been set. 


Pin States in Power_OFF Mode 


The pin state of the Power_OFF mode is as follows; 


Pin Type Pin Example Pin States in Power_OFF Mode 
GPIO output pin GPBO: output Output ( GPIO data register value is used.) 


nGCSO Output (the last output level is held.) 
Funaion input pin [nwa 
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Power Control of VDDi and VDDiarm 
In Power_OFF mode, only VDDi and VDDiarm will be turned off, which is controlled by PWREN pin. 


If PWREN signal is active(H), VDDi and VDDiarm are supplied by an external voltage regulator. If PWREN pin is 
inactive (L), the VDDi and VDDiarm are turned off. 


NOTE 


Although VDDi, VDDiarm, VDDi_MPLL and VDDi_UPLL may be turned off, the other power pins have to be 
supplied. 


1.8V / 2.0V Regulator 


1.8V /2.0V 
1.8V/2.0V EN Fone 


$3C2410A 


< 
0 
O 
2. 
= 
0) 


RTC Alarm 
Power CTRL 


Alive Block 
VDDi (Alive Block) 


VDDiarm 
VDDi_MPLL 


VDDi_UPLL External Interrupt 


Core & Peripherals 
3.3V Power 


Figure 7-12. Power_OFF Mode 
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Signaling EINT[15:0] for Wakeup 


The S3C2410A can be woken up from Power_OFF mode only if the following conditions are met. 


a) Level signals (H or L) or edge signals (rising or falling or both) are asserted on EINTn input pin. 
b) The EINTn pin has to be configured as EINT in the GPIO control register. 


c) nBATT_FLT pin has to be H level. It is important to configure the EINTn in the GPIO control register as an 
external interrupt pins, considering the condition a) above. 


Just after the wake-up, the corresponding EINTn pin will not be used for wakeup. This means that the pin can be 
used as an external interrupt request pin again. 


Entering IDLE Mode 


If CLKCON[2] is set to 1 to enter the IDLE mode, the S3C2410A will enter IDLE mode after some delay (until the 
power control logic receives ACK signal from the CPU wrapper). 

PLL On/Off 

The PLL can only be turned off for low power consumption in slow mode. If the PLL is turned off in any other mode, 
MCU operation is not guaranteed. 


When the processor is in SLOW mode and tries to change its state into other state with the PLL turned on, then 
SLOW _BIT should be clear to move to another state after PLL stabilization 

Pull-up Resistors on the Data Bus and Power_OFF Mode 

In Power_OFF mode, the data bus (D[31:0] or D[15:0] ) is in Hi-z state. 

But, because of the characteristics of I/O pad, the data bus pull-up resistors have to be turned on for low power 
consumption in Power_OFF mode. D[31:0] pin pull-up resistors can be controlled by the GPIO control register 


(MISCCR). However, if there is an external bus holder, such as 74LVCH162245, on the data bus, turning off the data 
bus pull-up resistors will be reduce power consumption. 
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Output Port State and Power_OFF Mode 


The output port should have a proper logic level in power off mode, which makes the current consumption minimized. 

If there is no load on an output port pin, H level is preferred. If output is L, the current will be consumed through the 

internal parasitic resistance; if the output is H, the current will not be consumed. For an output port, the current 

consumption can be reduced if the output state is H. 

Battery Fault Signal(nBATT_FLT) 

There are two functions in nBATT_FLT pin as follows; 

— When CPU is not in Power_OFF mode, nBATT_FLT pin will cause the interrupt request. The interrupt attribute of 
the nBATT_FLT is L-level triggered. 


— While CPU is in Power_OFF mode, assertion of the nBATT_FLT will prohibit the wake up from the power-down 
mode. So, Any wake-up source will be masked if nNRBATT_FLT is asserted, which is protecting the system 
malfunction of the low battery capacity 


ADC Power Down 


The ADC has an additional power-down bit in ADCCON. If the S8C2410A enters the Power_OFF mode, the ADC 
should enter its own power-down mode. 


S/W Work-Around 


After 'wake-up' from the Power_OFF mode by RTC_ALARM, the RTC source pending bit of the SRCPND register is 
not set. So, the ALARM date has to be checked after the wake-up from Power_OFF mode. 
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CLOCK GENERATOR & POWER MANAGEMENT SPECIAL REGISTER 


LOCK TIME COUNT REGISTER (LOCKTIME) 


LOCKTIME | 0x4C000000 PLL lock time count register OxOOFFFFFF 


U_LTIME [23:12] | UPLL lock time count value for UCLK. OxFFF 
(U_LTIME > 150uS) 


M_LTIME [11:0] | MPLL lock time count value for FCLK, HCLK, and PCLK OxFFF 
(M_LTIME > 150uS) 


PLL Control Register (MPLLCON and UPLLCON) 
Mpll = (m * Fin) / (p * 2°) 
m = (MDIV + 8), p = (PDIV + 2), s = SDIV 


NOTE: Although there is the rule for choosing PLL value, we recommend only the values in the PLL value 
recommendation table. If you have to use another value, please contact us. 


MPLLCON 0x4C000004 MPLL configuration register 0x0005C080 
UPLLCON 0x4C000008 UPLL configuration register 0x00028080 


Cpuicon [ee | —~—~S~«C a crpton——SSCSCS*S*~S*S*~SC a Sat 


NOTE: When you set MPLL&UPLL values simultaneously, set UPLL value first and then MPLL value. (Needs intervals 
approximately 7 NOP) 
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PLL VALUE SELECTION TABLE 


It is not easy to find a proper PLL value. So, We recommend referring to the following PLL value recommendation 
table. 


161 Oa 
120078) 
( 


142 (Ox8e) 


82 (0x52 
7 


( 
(07 


NOTE: The 48.00MHz output is used for UPLLCON register. 
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CLOCK CONTROL REGISTER (CLKCON) 


CLKCON 0x4C00000C Clock generator control register Ox7FFFO 


| cLKCON | Bit_ | Ciescription | ttial State 
Control PCLK into SPI block. 0 = Disable, 1 = Enable 
Control PCLK into IIS block. 0 = Disable, 1 = Enable 


UART2 [12] Control PCLK into UART2 block. 0 = Disable, 1 = Enable 
UART1 [11] Control PCLK into UART1 block. 0 = Disable, 1 = Enable 
UARTO [10] Control PCLK into UARTO block. 0 = Disable, 1 = Enable 


SDI Control PCLK into SDI interface block. 
0 = Disable, 1 = Enable 


Control PCLK into PWMTIMER block. 
0 = Disable, 1 = Enable 

Control PCLK into USB device block. 
0 = Disable, 1 = Enable 

Control HCLK into USB host block. 

0 = Disable, 1 = Enable 

Control HCLK into LCDC block. 

0 = Disable, 1 = Enable 


Control HCLK into NAND Flash Controller block. 
0 = Disable, 1 = Enable 


POWER_OFF [3] Control Power Off mode of S3C2410. 
0 = Disable, 1 = Transition to Power_OFF mode 
IDLE BIT [2] Enter IDLE mode. This bit is not cleared automatically. 
0 = Disable, 1 = Transition to IDLE mode 


1] 


SPECIAL mode. 

‘0' is recommended normally. 

This bit can be used to enter SPECIAL mode in only the 
special condition, OM3=1 & wake-up by nRESET. Please 
contact us to use this bit. 
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CLOCK SLOW CONTROL (CLKSLOW) REGISTER 


CLKSLOW 0x4C000010 Slow clock control register 0x00000004 


cuksiow [ek [—~~~=eserption—~SCSC*~*~*~S~SC Sat 


UCLK_ON [7] 0: UCLK ON (UPLL is also turned on and the UPLL lock time is 
inserted automatically.) 
1: UCLK OFF (UPLL is also turned off.) 


MPLL_OFF [5] 0 : PLL is turned on. 
After PLL stabilization time (minimum 150us), SLOW_BIT 
can be cleared to 0. 
1: PLL is turned off. 
PLL is turned off only when SLOW _BIT is 1. 


SLOW_BIT [4] 0 : FCLK = Mpll (MPLL output) 
1: SLOW mode 
FCLK = input clock / (2 x SLOW_VAL) (SLOW_VAL > 0) 
FCLK = input clock (SLOW_VAL = 0) 
input clock = XTIpll or EXTCLK 


feed | m@ | CSCS 
SLOW_VAL [2:0] The divider value for the slow clock when SLOW_BIT is on. 0x4 


CLOCK DIVIDER CONTROL (CLKDIVN) REGISTER 


CLKDIVN 0x4C000014 Clock divider control register 0x00000000 


HDIVN1 Special bus clock ratio available. (1:4:4) 


0: Reserved 
1: HCLK has the clock same as the FCLK/4. 
PCLK has the clock same as the FCLK/4. 


Note: If this bit is "0b1", HDIVN and PDIVN must be set "Ob0". 
[1] 0: HCLK has the clock same as the FCLK. 

1: HCLK has the clock same as the FCLK/2. 
[0] 0: PCLK has the clock same as the HCLK. 

1: PCLK has the clock same as the HCLK/2. 


A 
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DMA 


OVERVIEW 


The S3C2410A supports four-channel DMA controller that is located between the system bus and the peripheral bus. 
Each channel of DMA controller can perform data movements between devices in the system bus and/or peripheral 
bus with no restrictions. In other words, each channel can handle the following four cases: 1) both source and 
destination are in the system bus, 2) the source is in the system bus while the destination is in the peripheral bus, 
3) the source is in the peripheral bus while the destination is in the system bus, and 4) both source and destination 
are in the peripheral bus. 


The main advantage of the DMA is that it can transfer the data without CPU intervention. The operation of DMA can 
be initiated by software, or requests from internal peripherals or external request pins. 
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DMA REQUEST SOURCES 


Each channel of the DMA controller can select one of DMA request source among four DMA sources if H/W DMA 
request mode is selected by DCON register. (Note that if S/W request mode is selected, this DMA request sources 
have no meaning at all.) Table 8-1 shows four DMA sources for each channel. 


Table 8-1. DMA Request Sources for Each Channel 


nXDREQO UARTO USB device EP1 


nXDREQ1 UART1 l2SSDI SPIO USB device EP2 
l2SSDO I2SSDI SDI USB device EP3 
UART2 SDI SPI1 USB device EP4 


Here, nXDREQO and nXDREQ1 represent two external sources(External Devices), and l2SSDO and I2SSDI represent 
IIS transmitting and receiving, respectively. 


DMA OPERATION 


DMA uses three-state FSM (finite state machine) for its operation, which is described in the three following steps: 


State-1. As an initial state, the DMA waits for a DMA request. If it comes, it goes to state-2. At this state, DMA ACK 
and INT REQ are 0. 


State-2. In this state, DMA ACK becomes 1 and the counter (CURR_TC) is loaded from DCON[19:0] register. Note 
that the DMA ACK remains 1 until it is cleared later. 


State-3. In this state, sub-FSM handling the atomic operation of DMA is initiated. The sub-FSM reads the data from 
the source address and then writes it to destination address. In this operation, data size and transfer size 
(single or burst) are considered. This operation is repeated until the counter (CURR_TC) becomes 0 in 
Whole service mode, while performed only once in Single service mode. The main FSM (this FSM) counts 
down the CURR_TC when the sub-FSM finishes each of atomic operation. In addition, this main FSM 
asserts the INT REQ signal when CURR_TC becomes 0 and the interrupt setting of DCON[29] register is 
set to 1. In addition, it clears DMA ACK if one of the following conditions is met. 
1) CURR_TC becomes 0 in the Whole service mode 
2) Atomic operation finishes in the Single service mode. 


Note that in the Single service mode, these three states of main FSM are performed and then stops, and waits for 
another DMA REQ. And if DMA REQ comes in, all three states are repeated. Therefore, DMA ACK is asserted and 
then deasserted for each atomic transfer. In contrast, in the Whole service mode, main FSM waits at state-3 until 
CURR_TC becomes 0. Therefore, DMA ACK is asserted during all the transfers and then deasserted when TC 
reaches 0. 


However, INT REQ is asserted only if CURR_TC becomes 0 regardless of the service mode (Single service mode or 
Whole service mode). 
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EXTERNAL DMA DREQ/DACK PROTOCOL 


There are three types of external DMA request/acknowledge protocols (Single service Demand, Single service 
Handshake and Whole service Handshake mode). Each type defines how the signals like DMA request and 
acknowledge are related to these protocols. 


Basic DMA Timing 


The DMA service means performing paired Reads and Writes cycles during DMA operation, which can make one 
DMA operation. Figure 8-1 shows the basic Timing in the DMA operation of the S8C2410A. 


— _ The setup time and the delay time of XnNXDREQ and XnXDACK are the same in all the modes. 


— If the completion of XnXDREQ meets its setup time, it is synchronized twice and then XnXDACK is asserted. 


— After assertion of XnXDACK, DMA requests the bus and if it gets the bus it performs its operations. XnXDACK is 
deasserted when DMA operation is completed. 


XnXDACK 


Figure 8-1. Basic DMA Timing Diagram 


Table 8-2. DMA Controller Module Signal Timing Constants 
(Vpp = 1.8 V £0.15 V/2.0V + 0.1V, Ty = -40 to 85 °C, Vey, = 3.3V + 0.3V) 


ELECTRONICS 8-3 


DMA S3C2410A 


Demand/Handshake Mode Comparison 

Demand and Handshake modes are related to the protocol between XnXDREQ and XnXDACK. Figure 8-2 shows the 
differences between the two modes. 

At the end of one transfer (Single/Burst transfer), DMA checks the state of double-synched XnXDREQ. 


Demand Mode 


— If XnXDREQ remains asserted, the next transfer starts immediately. Otherwise it waits for XnXDREQ to be 
asserted. 


Handshake Mode 


— If XnXDREQ is deasserted, DMA deasserts XnXDACK in 2cycles. Otherwise it waits until XnNXDREQ is 
deasserted. 


CAUTION 
XnXDREQ has to be asserted (low) only after the deassertion (high) of XnNXDACK. 


Demand Mode 


XnXDREQ 


1st Transfer 


XnXDACK 


¢<———_>'! 
Double synch ' : 
' Read X Write 


Handshake Mode 


XnXDREQ 


_— 
Read \ Write 


XnXDACK >| 


<> toa] 
! Double synch ! 


Figure 8-2. Demand/Handshake Mode Comparison 
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Transfer Size 
— There are two different transfer sizes; unit and Burst 4. 


— DMA holds the bus firmly during the transfer of the chunk of data. Thus, other bus masters cannot get the bus. 


Burst 4 Transfer Size 


Four sequential Reads and Writes are performed respectively in the Burst 4 Transfer. 


NOTE 


Unit Transfer size: One read and one write are performed. 


Figure 8-3. Burst 4 Transfer Size 
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EXAMPLES 


Single service in Demand Mode with Unit Transfer Size 


The assertion of XnXDREQ is need for every unit transfer (Single service mode). The operation continues while the 
XnXDREQ is asserted (Demand mode), and one pair of Read and Write (Single transfer size) is performed. 


XnXDREQ 


XnXDACK 


Figure 8-4. Single service in Demand Mode with Unit Transfer Size 


Single service in Handshake Mode with Unit Transfer Size 


XnXDREQ 


1 Pa 
' OD 


1 
Double synch ; 
! 


Figure 8-5. Single service in Handshake Mode with Unit Transfer Size 


Whole service in Handshake Mode with Unit Transfer Size 


XnXDREQ 


XnXDACK 


Figure 8-6. Whole service in Handshake Mode with Unit Transfer Size 
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DMA SPECIAL REGISTERS 


Each DMA channel has nine control registers (36 in total since there are four channels for DMA controller). Six of the 
control registers control the DMA transfer, and other three ones monitor the status of DMA controller. The details of 
those registers are as follows. 


DMA INITIAL SOURCE (DISRC) REGISTER 


S_ADDR [30:0] | Base address (start address) of source data to transfer. This bit 0x00000000 
value will be loaded into CURR_SRC only if the CURR_SRC is 0 
and the DMA ACK is 1. 


DMA INITIAL SOURCE CONTROL (DISRCC) REGISTER 


[1] Bit 1 is used to select the location of source. 
0: the source is in the system bus (AHB). 
1: the source is in the peripheral bus (APB). 


INC Bit 0 is used to select the address increment. 
0 = Increment 1= Fixed 
If itis O, the address is increased by its data size after each 
transfer in burst and single transfer mode. 
If it is 1, the address is not changed after the transfer. 
(In the burst mode, address is increased during the burst transfer, 


but the address is recovered to its first value after the transfer.) 
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DMA INITIAL DESTINATION (DIDST) REGISTER 


D_ADDR [30:0] | Base address (start address) of destination for the transfer. This bit 0x00000000 
value will be loaded into CURR_SRC only if the CURR_DST is 0 
and the DMA ACK is 1. 


DMA INITIAL DESTINATION CONTROL (DIDSTC) REGISTER 


Bit 1 is used to select the location of destination. 


0: the destination is in the system bus (AHB). 
1: the destination is in the peripheral bus (APB). 


Bit 0 is used to select the address increment. 
0 = Increment 1= Fixed 


If itis O, the address is increased by its data size after each 
transfer in burst and single transfer mode. 


If it is 1, the address is not changed after the transfer. 
(In the burst mode, address is increased during the burst transfer, 
but the address is recovered to its first value after the transfer.) 
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DMA CONTROL (DCON) REGISTER 


DMD_HS [31] Select one between Demand mode and Handshake mode. 
0: Demand mode is selected. 
1: Handshake mode is selected. 
In both modes, DMA controller starts its transfer and asserts 
DACK for a given asserted DREQ. The difference between the two 
modes is whether it waits for the deasserted DACK or not. In the 
Handshake mode, DMA controller waits for the deasserted DREQ 
before starting a new transfer. If it finds the deasserted DREQ, it 
deasserts DACK and waits for another asserted DREQ. In contrast, 
in the Demand mode, DMA controller does not wait until the DREQ 
is deasserted. It just deasserts DACK and then starts another 
transfer if DREQ is asserted. We recommend using Handshake 
mode for external DMA request sources to prevent unintended 
starts of new transfers. 


SYNC [30] Select DREQ/DACK synchronization. 
0: DREQ and DACK are synchronized to PCLK (APB clock). 
1: DREQ and DACK are synchronized to HCLK (AHB clock). 
Therefore, for devices attached to AHB system bus, this bit has to 
be set to 1, while for those attached to APB system, it should be 
set to 0. For the devices attached to external systems, the user 
should select this bit depending on which the external system is 
synchronized with between AHB system and APB system. 


INT 
(i.e. CURR_TC becomes 0). 
TSZ [28] Select the transfer size of an atomic transfer 
(i.e. transfer performed each time DMA owns the bus before 
releasing the bus). 
0: a unit transfer is performed. 
1: a burst transfer of length four is performed. 
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[29] Enable/Disable the interrupt setting for CURR_TC (terminal count) 
0: CURR_TC interrupt is disabled. The user has to view the 
transfer count in the status register (i.e. polling). 
1: interrupt request is generated when all the transfer is done 


DMA 
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DMA CONTROL (DCON) REGISTER (Continued) 


SERVMODE 
HWSRCSEL 


SWHW_ SEL 
RELOAD 
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Select the service mode between Single service mode and Whole service 
mode. 


0: Single service mode is selected in which after each atomic transfer 
(single or burst of length four) DMA stops and waits for another DMA 
request. 

1: Whole service mode is selected in which one request gets atomic 
transfers to be repeated until the transfer count reaches to 0. In this mode, 
additional request are not required. 


Note that even in the Whole service mode, DMA releases the bus after 
each atomic transfer and then tries to re-get the bus to prevent starving of 
other bus masters. 


Select DMA request source for each DMA. 


DCONO: 000:nXDREQO 001:UARTO 010:SDI 011:Timer 100:USB device EP1 


DCON1: 000:nXDREQ1 001:UART1 010:I2SSDI 011:SPI 100:USB device EP2 


DCON2: 000:I2SSDO 
DCONS: 000:UART2 


001:I2SSDI 
001:SDI 


010:SDI 
010:SPI 


011:Timer 
011:Timer 


100:USB device EP3 
100:USB device EP4 


These bits control the 4-1 MUX to select the DMA request source of each 
DMA. These bits have meanings only if H/W request mode is selected by 
DCONh[23}. 


Select the DMA source between software (S/W request mode) and 
hardware (H/W request mode). 


0: S/W request mode is selected and DMA is triggered by setting 
SW_TRIG bit of DMASKTRIG control register. 
1: DMA source selected by bit[26:24] triggers the DMA operation. 


Set the reload on/off option. 


0: auto reload is performed when a current value of transfer count 

becomes 0 (i.e. all the required transfers are performed). 

1: DMA channel (DMA REQ) is turned off when a current value of 
transfer count becomes 0. The channel on/off bit (DMASKTRIGn[1]) is 
set to 0 (DREQ off) to prevent unintended further start of new DMA 


operation. 
Data size to be transferred. 


00 = Byte 01 = Half word 
10 = Word 11 = reserved 


Initial transfer count (or transfer beat). 

Note that the actual number of bytes that are transferred is computed by 
the following equation: DSZ x TSZ x TC. Where, DSZ, TSZ (1 or 4), and 
TC represent data size (DCONn[21:20]), transfer size (DCONn[28]), and 
initial transfer count, respectively. 

This value will be loaded into CURR_SRC only if the CURR_SRC is 0 and 
the DMA ACK is 1. 


00000 


ac 
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DMA STATUS (DSTAT) REGISTER 


Tosraro | oxbo000% | R [DMADcounvegster ———~=~S~C*«i 
osrars | o«4800005¢ | _R [DMA countregiter ——~—=~S~*dt~CSC«t 
osrare | o«B0000% | _R [DMA2 countregiter ——~—~S~*dt~CSC«i 
Tosrara | oxaao00004 | R [DMAS countregiter ———~—=S~*d*SC«t = 


STAT [21:20] | Status of this DMA controller. 
00: Indicates that DMA controller is ready for another DMA request. 
01: Indicates that DMA controller is busy for transfers. 
CURR_TC [19:0] | Current value of transfer count. 00000h 
peepee Note that transfer count is initially set to the value of DCONn[19:0] 
register and decreased by one at the end of every atomic transfer. 


DMA CURRENT SOURCE (DCSRC) REGISTER 


DCSRCO | 0x4B000018 | R | DMAO current Source Register 0x00000000 
DcsRci | 0x4B000058 | R | DMA 1 current Source Register 0x00000000 


DcsRc2 | ox4B000098 | R | DMA2 current Source Register 0x00000000 
DcsRc3__| 0x4B0000D8 | R | DMA3 current Source Register 0x00000000 


CURR_SRC [30:0] | Current source address for DMAn 0x00000000 
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DMA S3C2410A 


CURRENT DESTINATION (DCDST) REGISTER 


Depsto | 0x4B00001¢ | _R _| DMA 0 current destination register 0x00000000 
DCDST1 0x4B00005C | oR | DMA 1 current destination register 0x00000000 


DCDST2 0x4B00009C | oR | DMA 2 current destination register 0x00000000 
DcpsT3_| 0x4B0000Dc | _R__| DMA3 current destination register 0x00000000 


CURR_DST [30:0] | Current destination address for DMAn 0x00000000 
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DMA MASK TRIGGER (DMASKTRIG) REGISTER 


TpwaskrAiGo | osaBoo0020 | RW [OWA Omaskriggerrevster ————S«dtSCSC«tO 
T pwaskrArat | oxaBo00060 | RW [DMA masiiggerregiter——~—~S«dtSCiO 
Tpwaskrrce | ox4B0000A0 | RW DMA? maskiggerregiter——~S«dt Ci 
pastas | or4B00000 | RW [DMA masiiggerreviter——~S«dtSCiO 


STOP [2] Stop the DMA operation. 
1: DMA stops as soon as the current atomic transfer ends. If 
there is no current running atomic transfer, DMA stops 
immediately. The CURR_TC will be 0. 
NOTE: Due to possible current atomic transfer, “stop” operation 
may take several cycles. The finish of the operation (i.e. 
actual stop time) can be detected as soon as the channel 
on/off bit (DMASKTRIGn[1]) is set to off. This stop is “actual 
stop”. 


ON_OFF [1] DMA channel on/off bit. 
0: DMA channel is turned off. (DMA request to this channel is 
ignored.) 

: DMA channel is turned on and the DMA request is handled. 
This bit is automatically set to off if we set the DCONn[22] bit 
to “no auto reload” and/or STOP bit of DMASKTRIGn to “stop”. 
Note that when DCON[22] bit is "no auto reload", this bit 
becomes 0 when CURR_TC reaches 0. If the STOP bit is 1, 
this bit becomes 0 as soon as the current atomic transfer is 
completed. 

NOTE: This bit should not be changed manually during DMA 
operations (i.e. this has to be changed only by using 
DCON|[22] or STOP bit). 


SW_TRIG Trigger the DMA channel in S/W request mode. 
1: it requests a DMA operation to this controller. 
Note that this trigger gets effective after S/W request mode has 
to be selected (DCONn[23]) and channel ON_OFF bit has to be 
set to 1 (channel on). When DMA operation starts, this bit is 
cleared automatically. 


NOTE: You can freely change the values of DISRC register, DIDST registers, and TC field of DCON register. 
Those changes take effect only after the finish of current transfer (i.e. wnen CURR_TC becomes 0). On the other 
hand, any change made to other registers and/or fields takes immediate effect. Therefore, be careful in changing 
those registers and fields. 
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S/W Work-Around 


The DMA auto-reload is occurred only when the DMA request is issued after the DMA counter reaches 0. So, the 
following code should be used in the DMA done interrupt handler before setting the DMA source address, destination 
address and counter register for the next auto-reload. This code will wait until the first DMA request is issued and the 
previous auto-reload value is loaded. 


while((rDSTATn&Oxfffff}==0); 
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I/O PORTS 


OVERVIEW 


The S3C2410A has 117 multi-functional input/output port pins. The ports are: 


— Port A (GPA): 23-output port 
— Port B (GPB 
— Port C (GPC 


( 
( 11-input/output port 
( 
— Port D (GPD 
( 
( 


: 16-input/output port 
: 16-input/output port 


) 
) 
) 
— Port E (GPE) 
— Port F (GPF): 8-input/output port 
— Port G (GPG): 16-input/output port 
— PortH 


16-input/output port 


—>~ —a 


GPH): 11-input/output port 
Each port can be easily configured by software to meet various system configurations and design requirements. You 


have to define which function of each pin is used before starting the main program. If a pin is not used for multiplexed 
functions, the pin can be configured as I/O ports. 


Initial pin states are configured seamlessly to avoid problems. 
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Table 9-1. S3C2410A Port Configuration 


Selectable Pin Functions 


Outputonly | CE— || 
Output only mstour, [| | 


[—ouputeny [| apong [| 
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Table 9-1. S3C2410A Port Configuration (Continued) 


Selectable Pin Functions 

Pareto | _Inputoutpat | ~—sexDeco | 
F apes | imuoutout | oxdacko | | CY 
(eres | tnpwiouwpot | oxonecn «| SSCidSC(‘(‘“SC*”’ 
fF are7 | Inputoutpat | ——axackts =| 
Peres | tnowiowput | mpeg | | SC 
Paras | Inpuvoutpat | mack | 
Perea | tnowowpur | run] SS S| SCS 
Paras | Inpuvoutpat | tours, S| 
Parse | Inpwvoutpat | tures] 
Parei | inoutout | rom | | SCC” 
Parc | inoutouint | rom | - ~+| ~~ 


Selectable Pin Functions 


[orci | rnitouina | vos SiS 
[orci | noun | von «| SO SSSCSi 
[arco | noua | va —| Si 
-—erco | noua | vos] SS | 
[—erce | rnwoune | von | Sid 
[—ercr | noua | uoower | Sid SS 
[—ercs | rmouine | ucover | | 
[eros | rmwoune | _ucoveo |S | 
[arcs | npiouina [va 
[—ercs | none | _verame [Sid SS 
[—erce | rnwoune | we] | 
[crc | rnoune | vox [= sd 
[arco | rnwoune | _uenp | SO SSS 
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Table 9-1. S3C2410A Port Configuration (Continued) 


Selectable Pin Functions 


[ron [—SCS™S*«S etal Pin Functions 
(ores | rpwtoune [ uosoa | SO 
(ores | rnioune | use| S| 
(ores | rnwoune | spuxo | = «it 
(cree | rnwoune | spmoso | - +t 
(are: | rmoune | semusoo | = «dt 
[are | mone | sooara | S| 
= a 
[ence | noun | soars | ——-——Sid SS 
(ere? | rnwoune | sonara | S| 
[eres | rmwoune | soma [= =i 
[eres | rnwoune | sox | ——s«dt SS 
[eres | rmwoune | wsso1 | asso | 
[arco | rmwoune | coc | | 
SO a 
[arco | noua | wsunck | - +t 
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Table 9-1. S3C2410A Port Configuration (Continued) 


Selectable Pin Functions 


OT 
[oer | wpe [eT SCidSCO 
[ears [noua [ents iS 
[errs | noua [ents i Si 
Oc 
Pc 
a 
[ear | noua [ems —iSSSCSC~idS 
Pc 


Selectable Pin Functions 


A 
[oreis | noua [enna | non | 
Sc 
[cece | noua | eng [= id 
[—ore7 | noua | ens | spur | 
[cece | rnwoune | ena | spmosw | 
[orcs | rnwoune | ena | _sPmisor | 
[orcs | rnwoune | eng | toppwren | 
[arcs |_rmwoune | ents [asst | 
[—crce | rmwouine | eno | asso | 
[merci | rnitouina [ema iS SSSCi 
[creo | noun [emma [= ——SCid SS 


ELECTRONICS 9-5 


VO PORTS $3C2410A 


Table 9-1. S3C2410A Port Configuration (Continued) 


Selectable Pin Functions 


[Pont [—=~S*« table Pin Functions SSSSC*d 
[een | inpwoupst [courage 
Teens |— impwoupt [upc [OSC 
[—een7 | impwoupt | rma =| ners PSS 
Tape | impwoupst [gers PS 


Teens | impwoupt fm |S CdS 
Oc 
[erro | rpwoupst fm] SSC*dSCC SSCS 
Tere | rpwoupst foo] SC SSSC*~iSCCi‘ SCS 
[aes | inpwioupot | natse i 
[aero | impwoupst [acta | —- ~—*+| SS 
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PORT CONTROL DESCRIPTIONS 


PORT CONFIGURATION REGISTER (GPACON-GPHCON) 


In the S38C2410A, most pins are multiplexed. So, It is require to determine which function is selected for each pin. 
port control register (PnCON) determines the function of each pin. 


If GPFO — GPF7 and GPGO — GPG7 are used for wakeup signals in Power-OFF mode, these ports must be 
configured in Interrupt mode. 

PORT DATA REGISTER (GPADAT-GPHDAT) 

If ports are configured as output ports, data can be written to the corresponding bit of the PnDAT. If ports are 
configured as input ports, the data can be read from the corresponding bit of the PnDAT. 

PORT PULL-UP REGISTER (GPBUP-GPHUP) 


The port pull-up register controls the pull-up resister enable/disable of each port group. When the corresponding bit is 
0, the pull-up resister of the pin is enabled. When 1, the pull-up resister is disabled. 


If the port pull-up register is enabled, the pull-up resisters work without pin's functional setting (input, output, DATAn, 
EINTn, etc). 
MISCELLANEOUS CONTROL REGISTER 


This register controls DATA port pull-up resister, hi-z state, USB pad, and CLKOUT selection. 


EXTERNAL INTERRUPT CONTROL REGISTER (EXTINTN) 


The 24 external interrupts are requested by various signaling methods. The EXTINTn register configures the signaling 
method among the low level trigger, high level trigger, falling edge trigger, rising edge trigger, and both edge trigger for 
the external interrupt request. 


The 8 external interrupt pin has a digital filter (refer to EINTFLTn on page 9-25). 


Only 16 EINT pins (EINT [15:0]) are used for wakeup sources. 


POWER_OFF MODE AND I/O PORTS 


All GPIO register values are preserved in Power_OFF mode. Refer to the Power_OFF mode in the chapter, Clock & 
Power Management. 


The EINTMASK can't prohibit the wake-up from Power_OFF mode, But, If ENTMASK is masking one of EINT[15:4], 
the wake-up can be done but the EINT4_7 bit and EINT8_23 bit of the SRCPND will not set to 1 just after the wake- 


up. 
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I/O PORT CONTROL REGISTER 


PORT A CONTROL REGISTERS (GPACON/GPADAT) 


Reserves | 66000008 | - [Reserved = S*S*dtCSC 
[Reseves | 0160000000 | [Reserved ———=S~S~*~*~S~«~™CSC 


GPA22 [22] 0 = Output 1 =nFCE 


GPA21 [21] 0 = Output 1 = nRSTOUT 
(nRSTOUT = nRESET & nWDTRST & SW_RESET(MISCCR[16])) 


GPaDAT [Bt [——~—~S~SSCsiption SS 
[22:0] 


GPA[22:0] When the port is configured as output port, the pin state is the same as the 
that of the corresponding bit. 
When the port is configured as functional pin, undefined value will be read. 


9-8 ELECTRONICS 


$3C2410A VO PORTS 


PORT B CONTROL REGISTERS (GPBCON, GPBDAT, and GPBUP) 


reseved | onse0000% | [Reserved = SS*~*dtCSC« 


ee 
GPB10 [21:20] = Input 01 = Output 
a = nNXDREQO 11 = reserved 
GPB9 [19:18] = Input 01 = Output 
ra = nXDACKO 11 = reserved 
GPB8 [17:16] = Input 01 = Output 
a = nXDREQ1 11 = Reserved 
GPB7 [15:14] = Input 01 = Output 
ria = nXDACK1 11 = Reserved 
GPB6 [13:12] = Input 01 = Output 
a = nXBREQ 11 = reserved 
GPB5 [11:10] = Input 01 = Output 
a = nXBACK 11 = reserved 


GPB4 [9:8] = Input 01 = Output 
c TCLKO 11 = reserved 
GPB3 [7:6] = Input 01 = Output 
ce TOUT3 11 = reserved 
GPB2 [5:4] = Input 01 = Output 
i TOUT2 11 = reserved] 
GPB1 [3:2] = Input 01 = Output 
oe TOUT1 11 = reserved 
GPBO [1:0] = Input 01 = Output 
o. TOUTO 11 = reserved 


GPB[10:0] [10:0] When the port is configured as input port, data from external sources can be 
read to the corresponding pin. When the port is configured as output port, data 
written in this register can be sent to the corresponding pin. When the port is 
configured as functional pin, undefined value will be read. 


GPB[10:0] [10:0] 0: The pull-up function attached to to the corresponding port pin is enabled. 
1: The pull-up function is disabled. 
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PORT C CONTROL REGISTERS (GPCCON, GPCDAT, and GPCUP) 


reseved | onse00002 | - [Reserved = SSCS*dtCSC cd 


Ce 
GPC15 [31:30] = Input 01 = Output 
i VD[7] 11 = Reserved 
GPC14 [29:28] = Input 01 = Output 
ae VD[6] 11 = Reserved 
GPC13 [27:26] = Input 01 = Output 
o. VD[5] 11 = Reserved 
GPC12 [25:24] = Input 01 = Output 
ee VD[4] 11 = Reserved 
GPC11 [23:22] = Input 01 = Output 
io: VD[3] 11 = Reserved 
GPC10 [21:20] = Input 01 = Output 
foe VD[2] 11 = Reserved 


GPC9 [19:18] = Input 01 = Output 
a VD[1] 11 = Reserved 
GPC8 [17:16] = Input 01 = Output 
te VD[0] 11 = Reserved 
GPC7 [15:14] = Input 01 = Output 
ae LCDVF2 11 = Reserved 
GPC6 [13:12] = Input 01 = Output 
ce LCDVF1 11 = Reserved 
GPC5 [11:10] = Input 01 = Output 
i LCDVFO 11 = Reserved 
GPC4 = Input 01 = Output 
tae VM 11 = Reserved 
GPC3 [7:6] = Input 01 = Output 
na VFRAME 11 = Reserved 
GPC2 [5:4] = Input 01 = Output 
ie VLINE 11 = Reserved 
GPC1 [3:2] = Input 01 = Output 
foe VCLK 11 = Reserved 
GPCO [1:0] = Input 01 = Output 
ae LEND 11 = Reserved 
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GPC[15:0] [15:0] When the port is configured as input port, data from external sources can be 
read to the corresponding pin. When the port is configured as output port, data 
written in this register can be sent to the corresponding pin. When the port is 
configured as functional pin, undefined value will be read. 


qpcup— | Bit, | Ci escription 


GPC[15:0] [15:0] 0: The pull-up function attached to to the corresponding port pin is enabled. 
1: The pull-up function is disabled. 
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PORT D CONTROL REGISTERS (GPDCON, GPDDAT, and GPDUP) 


[reseves | onse000000 | - [Reserved SS*dtCSCe 


$3C2410A 


GPD15 [31:30] = Input 
ic VD23 
GPD14 [29:28] = Input 
fie vD22 
GPD13 [27:26] = Input 
a vD21 
GPD12 [25:24] = Input 
ie VD20 
GPD11 [23:22] = Input 
ie VD19 
GPD10 [21:20] = Input 
ne VD18 


GPD9 [19:18] = Input 
(0 VD17 
GPD8 [17:16] = Input 
Hie VD16 
GPD7 [15:14] = Input 
ie VD15 
GPD6 [13:12] = Input 
fe VD14 
GPD5 [11:10] = Input 
ie VD13 
GPD4 = Input 
ibe VD12 
GPD3 [7:6] = Input 
oe: VD11 
GPD2 [5:4] = Input 
oe VD10 
GPD1 [3:2] = Input 
fe VD9 
GPDO [1:0] = Input 
ae VD8 


01 = Output 
11 =nSSo 


01 = Output 
11 =nSS1 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 


01 = Output 
11 = Reserved 
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GPD[15:0] [15:0] When the port is configured as input port, data from external sources can be 
read to the corresponding pin. When the port is configured as output port, data 
written in this register can be sent to the corresponding pin. When the port is 
configured as functional pin, undefined value will be read. 


| @ppup | Bit, | Cescription 


GPD[15:0] [15:0] 0: The pull-up function attached to to the corresponding port pin is enabled. 
1: The pull-up function is disabled. 
(GPD[15:12] are "pull-up disabled" state at the initial condition.) 
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PORT E CONTROL REGISTERS (GPECON, GPEDAT, and GPEUP) 


reseved | onse00004c | - [Reserved = SS*S*dtCSC 


GPE15 [31:30] = Input 01 = Output (open drain output) 
has = IICSDA 11 = Reserved 
GPE14 [29:28] = Input 01 = Output (open drain output) 
ons = IICSCL 11 = Reserved 
GPE13 [27:26] = Input 01 = Output 
fae SPICLKO 11 = Reserved 
GPE12 [25:24] = Input 01 = Output 
ion SPIMOSIO 11 = Reserved 
GPE11 [23:22] = Input 01 = Output 
io SPIMISOO 11 = Reserved 
GPE10 [21:20] = Input 01 = Output 
io: SDDAT3 11 = Reserved 
GPEQ [19:18] = Input 01 = Output 
re SDDAT2 11 = Reserved 
GPE8 [17:16] = Input 01 = Output 
ri SDDAT1 11 = Reserved 
GPE7 [15:14] = Input 01 = Output 
a SDDATO 11 = Reserved 
GPE6 [13:12] = Input 01 = Output 
o SDCMD 11 = Reserved 
GPE5 [11:10] = Input 01 = Output 
fos SDCLK 11 = Reserved 
GPE4 = Input 01 = Output 
rn = I2SSDO 11 =12SSDI 
GPE3 [7:6] i = Input 01 = Output 
= l2SSDI 11 =nSSo 
GPE2 [5:4] = Input 01 = Output 
a. CDCLK 11 = Reserved 
GPE1 [3:2] = Input 01 = Output 
rn = I2SSCLK 11 = Reserved 
GPEO [1:0] 00 = Input 01 = Output 
10 = l2SLRCK 11 = Reserved 
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GPE[15:0] [15:0] When the port is configured as input port, data from external sources can be 
read to the corresponding pin. When the port is configured as output port, data 
written in this register can be sent to the corresponding pin. When the port is 
configured as a functional pin, undefined value will be read. 


OS 


GPE[15:0] [15:0] 0: The pull-up function attached to to the corresponding port pin is enabled. 
1: The pull-up function is disabled. 
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PORT F CONTROL REGISTERS (GPFCON, GPFDAT, and GPFPU) 


If GPFO - GPF7 are used for wakeup signals in Power_OFF mode, the ports must be configured as external interrupt 
(set in Interrupt mode). 


[resenesr | orscooonsc | - [Resened SSSCSCS*dSC 


GPF7 [15:14] = Input 01 = Output 
ne EINT7 11 = Reserved 

GPF6 [13:12] = Input 01 = Output 
ie EINT6 11 = Reserved 


GPF5 [11:10] = Input 01 = Output 
a EINT5 11 = Reserved 
GPF4 = Input 01 = Output 
ne EINT4 11 = Reserved 
GPF3 [7:6] = Input 01 = Output 
a EINT3 11 = Reserved 
GPF2 [5:4] = Input 01 = Output 
ae EINT2 11 = Reserved 
GPF1 [3:2] = Input 01 = Output 
— EINT1 11 = Reserved 
GPFO [1:0] = Input 01 = Output 
a EINTO 11 = Reserved 


NOTES: 


1. 


GPF[7:0] [7:0] When the port is configured as input port, data from external sources can be 
read to the corresponding pin. When the port is configured as output port, data 
written in this register can be sent to the corresponding pin. When the port is 
configured as functional pin, undefined value will be read. 


2. 
| aprup | Bit, | Cescription 


GPF[7:0] [7:0] 0: The pull-up function attached to to the corresponding port pin is enabled. 
1: The pull-up function is disabled. 
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PORT G CONTROL REGISTERS (GPGCON, GPGDAT, AND GPGUP) 


If GPG [7:0] are used for wakeup signals in Power_OFF mode, the ports must be configured as external interrupt 
(set in Interrupt mode). 


Reserved | ox6s000060 | — [Reseed SSSCS*dSCrene 


GPGCON 
GPG15 at :30] = Input 01 = Output 
e EINT23 11 = nYPON 
GPG14 [29:28] = Input 01 = Output 
6 EINT22 11 = YMON 
GPG13 [27:26] = Input 01 = Output 
i EINT21 11 =nXPON 
GPG12 [25:24] = Input 01 = Output 
ae EINT20 11 = XMON 
GPG11 [23:22] = Input 01 = Output 
io EINT19 11 = TCLK1 
GPG10 [21:20] = Input 01 = Output 
(5V Tolerant Input) ra EINT18 11 = Reserved 
GPGQ9 [19:18] = Input 01 = Output 
(5V Tolerant Input) ic. EINT17 11 = Reserved 
GPG8 [17:16] = Input 01 = Output 
(5V Tolerant Input) ra EINT16 11 = Reserved 
GPG7 [15:14] = Input 01 = Output 
o- EINT15 11 = SPICLK1 
GPG6 [13:12] = Input 01 = Output 
ri EINT14 11 = SPIMOSI1 
GPG5 [11:10] = Input 01 = Output 
o- EINT13 11 = SPIMISO1 
GPG4 = Input 01 = Output 
io: EINT12 11 =LCD_PWREN 
GPG3 [7:6] = Input 01 = Output 
eae EINT11 11=nSS1 
GPG2 [5:4] = Input 01 = Output 
6: EINT10 11 =nSso 
GPG1 [3:2] = Input 01 = Output 
roa EINT9 11 = Reserved 
GPGO [1:0] = Input 01 = Output 
o- EINT8 11 = Reserved 


aifY 
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GPG[15:0] [15:0] When the port is configured as input port, data from external sources can be 
read to the corresponding pin. When the port is configured as output port, data 
written in this register can be sent to the corresponding pin. When the port is 
configured as functional pin, undefined value will be read. 


a 


GPG[15:0] [15:0] 0: The pull-up function attached to to the corresponding port pin is enabled. 
1: The pull-up function is disabled. 
(GPG[15:11] are "pull-up disabled” state at the initial condition.) 
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PORT H CONTROL REGISTERS (GPHCON, GPHDAT, AND GPHUP) 


[reseved | onse000076 | - [Reserved —SS*~*dtCSC 


ee 
GPH10 [21:20] = Input 01 = Output 
io CLKOUT1 11 = Reserved 
GPH9 [19:18] = Input 01 = Output 
io: CLKOUTO 11 = Reserved 
GPH8 [17:16] = Input 01 = Output 
oe UEXTCLK 11 = Reserved 
GPH7 [15:14] = Input 01 = Output 
nH RXD2 11 =nCTS1 
GPH6 [13:12] = Input 01 = Output 
io TXD2 11 =nRTS1 
GPH5 [11:10] = Input 01 = Output 
: RXD1 11 = Reserved 


GPH4 [9:8] = Input 01 = Output 
a TXD1 11 = Reserved 
GPH3 [7:6] = Input 01 = Output 
foe RXDO 11 = reserved 
GPH2 [5:4] = Input 01 = Output 
ee TXDO 11 = Reserved 
GPH1 [3:2] = Input 01 = Output 
a = nRTSO 11 = Reserved 
GPHO [1:0] = Input 01 = Output 
Ga = nCTSO 11 = Reserved 


GPH[10:0] [10:0] When the port is configured as input port, data from external sources can be 
read to the corresponding pin. When the port is configured as output port, data 
written in this register can be sent to the corresponding pin. When the port is 
configured as functional pin, undefined value will be read. 


| @pHup | Bit, | Ci escription 


GPH[10:0] [10:0] 0: The pull-up function attached to to the corresponding port pin is enabled. 
1: The pull-up function is disabled. 
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MISCELLANEOUS CONTROL REGISTER (MISCCR) 


Pads related USB are controlled by this register for USB host, or for USB device. 


MISCCR 0x56000080 Miscellaneous control register 0x10330 


MISCCR Description 


[21:20] Reserved to 00b 
[19] 0: SCKE = Normal 1: SCKE = L level 
Used to protect SDRAM during the Power_OFF moe. 
nEN_SCLK1 [18] 0: SCLK1 =SCLK 1: SCLK1 =L level 
Used to protect SDRAM during the Power_OFF moe. 
nEN_SCLKO [17] 0: SCLKO = SCLK ~— 1: SCLKO = L level 
Used to protect SDRAM during the Power_OFF moe. 
nRSTCON [16] nRSTOUT software control (SW_RESET) 
0: nRSTOUT = 0, 1: nNRSTOUT = 1. 
Reserved [15:14] Reserved to 00b 
USBSUSPND1 [13] [13] USB Port 1 mode 
0 = Normal 1= Suspend 
USBSUSPNDO [12] [12] USB Port 0 mode 
0 = Normal 1= Suspend 


[11] Reserved to Ob 


CLKSEL1 [10:8] CLKOUT1 output singnal source 
000 = MPLLCLK 001=UPLLCLK 010=FCLK 
011 = HCLK 100 = PCLK 101 = DCLK1 
11x = Reserved 

Presoved | mM jo CC™~CS 

CLKSELO [6:4] CLKOUTO output singnal source 
000 = MPLLCLK 001=UPLLCLK 010=FCLK 
011 = HCLK 100 = PCLK 101 = DCLKO 
11x = Reserved 

USBPAD [3] 0 = Use pads related USB for USB device 
1 = Use pads related USB for USB host 

SPUCR_L [1] DATA[15:0] port pull-up resister 
0 = Enabled 1 = Disabled 

SPUCR_H DATA[31:16] port pull-up resister 
0 = Enabled 1 = Disabled 


NOTE: CLKOUT is prepared only for monitoring an internal clock situation (On/Off status or frequency). 
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DCLK CONTROL REGISTERS (DCLKCON) 


This register defines DCLKn signals, 


which work as clocks for external sources. See the following figure for how to 


make the DCLKn signals. The DCLKCON can actually operate only when CLKOUT[1:0] is set to send the DCLKn 


signals. 


DCLKCON 0x56000084 


DCLKCON 


DCLK1CMP ee 24] 
DCLK1DIV [23:20] 


Reserved 


DCLKODIV [7:4] 


Reserved 


ELECTRONICS 


DCLKO/1 control register 


Description 


DCLK1 Compare value clock toggle value. (< DCLK1DIV) 
If the DCLK1 CMP is n, Low level duration is (n + 1). 
High level duration is ( (DCLK1DIV + 1) — (n +1) ). 


DCLK1 Divide value 
DCLK1 frequency = source clock / (DCLK1DIV + 1) 


Select DCLK1 source clock 
0 = PCLK 1 = UCLK (USB) 


DCLK1 Enable 
0 = Disable 1 = Enable 


0000b 


DCLKO Compare value clock toggle value. (< DCLKODIV) 
If the DCLKOCMP is n, Low level duration is (n + 1). 
High level duration is ( (DCLKODIV + 1) — (n +1) ). 


DCLKO Divide value. 
DCLKO frequency = source clock / (DCLKODIV + 1) 


Select DCLKO source clock 
0 = PCLK 1 = UCLK (USB) 


DCLKO Enable 
0 = Disable 1 = Enable 


DCLKnCMP + 1 


DCLKnDIV + mi 
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EXTERNAL INTERRUPT CONTROL REGISTER (EXTINTn) 


The 24 external interrupts can be requested by various signaling methods. The EXTINTn configures the signaling 
method between the level trigger and edge trigger for the external interrupt request, and also configures the signal 
polarity. 


To recognize the level interrupt, the valid logic level on EXTINTn pin must be retained at least for 40ns because of the 
noise filter (EINT[15:0)). 


exTinro, | Bit, | Cescription 


EINT7 [30:28] Set the signaling method of the EINT7. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
EINT6 [26:24] Set the signaling method of the EINT6. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
EINT5 [22:20] Set the signaling method of the EINT5. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


EINT4 [18:16] Set the signaling method of the EINT4. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
EINT3 [14:12] Set the signaling method of the EINTS. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
EINT2 [10:8] Set the signaling method of the EINT2. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
EINT1 [6:4] Set the signaling method of the EINT1. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
EINTO [2:0] Set the signaling method of the EINTO. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
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EXTINT? | Bit |  =————S—SCéi scription = Cd 
ef 


EINT15 [30:28] Set the signaling method of the EINT15. 
000 = Low level 001 =High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


ai 


EINT14 [26:24] Set the signaling method of the EINT14. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


25 


EINT13 [22:20] Set the signaling method of the EINT13. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


7a 


EINT12 [18:16] Set the signaling method of the EINT12. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


(6 


EINT11 [14:12] Set the signaling method of the EINT11. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


io 


EINT10 [10:8] Set the signaling method of the EINT10. 
000 = Low level 001 =High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


EINT9 [6:4] Set the signaling method of the EINT9. 
000 = Low level 001 =High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


EINT8 [2:0] Set the signaling method of the EINT8. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
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ExTINT2 | Bite | escription 
FLTEN23 [31] Filter Enable for EINT23 0 = Disable 1= Enable 


EINT23 [30:28] Set the signaling method of the EINT23. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


FLTEN22 [27] Filter Enable for EINT22 0 = Disable 1= Enable 


EINT22 [26:24] Set the signaling method of the EINT22. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


FLTEN21 [23] Filter Enable for EINT21 0 = Disable 1= Enable 


EINT21 [22:20] Set the signaling method of the EINT21. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


FLTEN20 [19] Filter Enable for EINT20 0 = Disable 1= Enable 


EINT20 [18:16] Set the signaling method of the EINT20. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


FLTEN19 [15] Filter Enable for EINT19 0 = Disable 1= Enable 


EINT19 [14:12] Set the signaling method of the EINT19. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


FLTEN18 [11] Filter Enable for EINT18 0 = Disable 1= Enable 


EINT18 [10:8] Set the signaling method of the EINT18. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


FLTEN17 Filter Enable for EINT17 0 = Disable 1= Enable 


EINT17 [6:4] Set the signaling method of the EINT17. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 


FLTEN16 Filter Enable for EINT16 0 = Disable 1= Enable 


EINT16 [2:0] Set the signaling method of the EINT16. 
000 = Low level 001 = High level 01x = Falling edge triggered 
10x = Rising edge triggered 11x = Both edge triggered 
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EXTERNAL INTERRUPT FILTER REGISTER (EINTFLTn) 


The EINTFLTn controls the length of filter for 8 external interrupts (EINT[23:16]). 


Ri 
aw [Reed SSOSC=<“~*~“‘~*s*~dSC‘“‘S* 
RW [Reseed ——SSSCSC~“~‘“*~“‘~‘“~«~dCSSCSCS~* 


FLTCLK19 [31] Filter clock of EINT19 
0 = PCLK 1= EXTCLK/OSC_CLK (Selected by OM pin) 
[3 


EINTFLT19 0:24] Filter width of EINT19 


FLTCLK18 [23] Filter clock of EINT18 
0 = PCLK 1= EXTCLK/OSC_CLK (Selected by OM pin) 


EINTFLT18 [22:16] Filter width of EINT18 


FLTCLK17 [15] Filter clock of EINT17 
0 = PCLK 1= EXTCLK/OSC_CLK (Selected by OM pin) 


EINTFLT17 [14:8] Filter width of EINT17 


FLTCLK16 [7] Filter clock of EINT16 
0 = PCLK 1= EXTCLK/OSC_CLK (Selected by OM pin) 


EINTFLT16 =| —[6:0]_—_—| Filter width of EINT16 


FLTCLK23 [31] Filter clock of EINT23 
0 = PCLK 1= EXTCLK/OSC_CLK (Selected by OM pin) 


EINTFLT23 [30:24] Filter width of EINT23 


FLTCLK22 [23] Filter clock of EINT22 
0 = PCLK 1= EXTCLK/OSC_CLK (Selected by OM pin) 


EINTFLT22 [22:16] Filter width of EINT22 


FLTCLK21 [15] Filter clock of EINT21 
0 = PCLK 1= EXTCLK/OSC_CLK (Selected by OM pin) 


EINTFLT21 [14:8] Filter width of EINT21 


FLTCLK20 [7] Filter clock of EINT20 
0 = PCLK 1= EXTCLK/OSC_CLK (Selected by OM pin) 


EINTFLT20 | — [6:0}__| Filter width of EINT20 


aifY 
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EXTERNAL INTERRUPT MASK REGISTER (EINTMASK) 


Interrupt mask register for 20 external interrupts (EINT[23:4)). 


EINTMASK 0x560000A4 External interupt mask register OxOOFFFFFO 


0 = Enable Interrupt + 1= Masked 
EINT21 0 = Enable Interrupt 1= Masked 
EINT20 0 = Enable Interrupt + 1= Masked 
EINT19 0 = Enable Interrupt + 1= Masked 
EINT18 0 = Enable Interrupt + 1= Masked 


EINT12 0 = Enable Interrupt 1= Masked 
EINT11 0 = Enable Interrupt 1= Masked 
0 = Enable Interrupt + 1= Masked 


0 = Enable Interrupt + 1= Masked 
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EXTERNAL INTERRUPT PENDING REGISTER (EINTPENDn) 


Interrupt pending register for 20 external interrupts (EINT[23:4]). You can clear a specific bit of the ENITPEND 
register by writing "1" on the corresponding bit of this register. 


EINTPEND 0x560000A8 External interupt pending register 


EINT19 0 = Not requested 1= Requested 
EINT18 0 = Not requested 1= Requested 
EINT17 0 = Not requested 1= Requested 
EINT16 0 = Not requested 1= Requested 
EINT15 0 = Not requested 1= Requested 


EINT13 [13] 0 = Not requested 1= Requested 
EINT12 [12] O = Not requested 1= Requested 
EINT11 [11] 0 = Not requested 1= Requested 


0 = Not requested 1= Requested 
0 = Not requested 1= Requested 
0 = Not requested 1= Requested 
0 = Not requested 1= Requested 
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GENERAL STATUS REGISTER (GSTATUSn) 


Tastaruso | orse0000a0 | [exerarpinsaus ———~=~S*~*~*~S~tCS*«U 
Testarust | 0x66000080 | Ronin SSSCS~«*dC e000 | 


Cestaruso [en [Scriptom 
PC waarrAct | (or |stats ofn@arr Ftp 


CHIP ID [31:0] ID register = 0x32410002 


Testaruse | et | SSC ipo 
PWRST Power on reset, if this bit is set to "1". 
me | & The setting is cleared by writing "1" to this bit. 
OFFRST [1] Power_OFF reset. The reset after the wakeup from Power_OFF mode. 
oe | | The setting is cleared by writing "1" to this bit. 
WDTRST [2] Watchdog reset. The reset derived from Watchdog timer. 
i The setting is cleared by writing "1" to this bit. 


INFORM [31:0] Inform register. This register is cleared by nRESET or watchdog timer. 
Otherwise, preserve data value. 


INFORM [31:0] Inform register. This register is cleared by nRESET or watchdog timer. 
Otherwise, preserve data value. 
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PWM TIMER 


OVERVIEW 


The S3C2410A has five 16-bit timers. Timer 0, 1, 2, and 3 have Pulse Width Modulation (PWM) function. Timer 4 has 
an internal timer only with no output pins. The timer 0 has a dead-zone generator, which is used with a large current 
device. 


The timer 0 and 1 share an 8-bit prescaler, while the timer 2, 3 and 4 share other 8-bit prescaler. Each timer has a 
clock divider which 5 different divided signals (1/2, 1/4, 1/8, 1/16, and TCLK). Each timer block receives its own clock 
signals from the clock divider, which receives the clock from the corresponding 8-bit prescaler. The 8-bit prescaler is 
programmable and divides the PCLK according to the loading value, which is stored in TCFGO and TCFG1 registers. 


The timer count buffer register (TCNTBn) has an initial value which is loaded into the down-counter when the timer is 
enabled. The timer compare buffer register (TCMPBn) has an initial value which is loaded into the compare register to 
be compared with the down-counter value. This double buffering feature of TCNTBn and TCMPBn makes the timer 
generate a stable output when the frequency and duty ratio are changed. 


Each timer has its own 16-bit down counter, which is driven by the timer clock. When the down counter reaches 
zero, the timer interrupt request is generated to inform the CPU that the timer operation has been completed. When 
the timer counter reaches zero, the value of corresponding TCNTBn is automatically loaded into the down counter to 
continue the next operation. However, if the timer stops, for example, by clearing the timer enable bit of TCONn 
during the timer running mode, the value of TCNTBn will not be reloaded into the counter. 


The value of TCMPBn is used for pulse width modulation (PWM). The timer control logic changes the output level 
when the down-counter value matches the value of the compare register in the timer control logic. Therefore, the 
compare register determines the turn-on time (or turn-off time) of an PWM output. 


FEATURE 


— Five 16-bit timers 

— Two 8-bit prescalers & Two 4-bit divider 

— Programmable duty control of output waveform (PWM) 
— Auto reload mode or one-shot pulse mode 


— Dead-zone generator 
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Dead Zone 
Generator 
Dead Zone 


8-Bit 
Prescaler 


Dead Zone 


8-Bit 
TCMPB3 TCNTB3 


Clock 
Divider 


Figure 10-1. 16-bit PWM Timer Block Diagram 
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PWM TIMER OPERATION 


PRESCALER & DIVIDER 


An 8-bit prescaler and a 4-bit divider make the following output frequencies: 


4-bit divider settings Minimum resolution Maximum resolution Maximum interval 
(prescaler = 0) (prescaler = 255) a 65535) 


| 1/2 (PCLK = 66.5 MHz) | (PCLK = 66.5 MHz) 0.0300 us (33.2500 MHz 7.6992 us (129.8828 KHz | 0.5045 sec 5045 sec 


1/4 (PCLK = 66.5 MHz) 0.0601 us (16.6250 MHz 15.3984 us (64.9414 KHz 1.0091 sec 
1/8 (PCLK = 66.5 MHz) 0.1203 us ( 8.3125 MHz 30.7968 us (32.4707 KHz 2.0182 sec 
1/16 (PCLK = 66.5 MHz) | 0.2406 us ( 4.1562 MHz 61.5936 us (16.2353 KHz 4.0365 sec 


BASIC TIMER OPERATION 


Start bit=1 } | Timer is started} |TCNTn=TCMPn]| | Auto-reload | |TCNTn=TCMPn] | Timer is stopped 


Manual update=1 | | Manual update=0 
Auto-reload=1 Auto-reload=1 


Figure 10-2. Timer Operations 


A timer (except the timer ch-5) has TCNTBn, TCNTn, TCMPBn and TCMPn. (TCNTn and TCMPn are the names of 
the internal registers. The TCNTn register can be read from the TCNTOn register) The TCNTBn and the TCMPBn are 
loaded into the TCNTn and the TCMPn when the timer reaches 0. When the TCNTn reaches 0, an interrupt request 
will occur if the interrupt is enabled. 


ELECTRONICS 10-3 


PWM TIMER S3C2410A 


AUTO RELOAD & DOUBLE BUFFERING 


$3C2410A PWM Timers have a double buffering function, enabling the reload value changed for the next timer 
operation without stopping the current timer operation. So, although the new timer value is set, a current timer 
operation is completed successfully. 


The timer value can be written into Timer Count Buffer register (TCNTBn) and the current counter value of the timer 
can be read from Timer Count Observation register (TCNTOn). If the TCNTBn is read, the read value does not indicate 
the current state of the counter but the reload value for the next timer duration. 


The auto reload operation copies the TCNTBn into TCNTn when the TCNTn reaches 0. The value, written into the 
TCNTBnh, is loaded to the TCNTn only when the TCNTn reaches 0 and auto reload is enabled. If the TCNTn becomes 
0 and the auto reload bit is 0, the TCNTn does not operate any further. 


Write Write 
TCNTBn = 100 TCNTBn = 200 


Start 


TCNTBn = 150 | | 


Auto-reload _| 


t]H4H$_ > |d11H#A > tH!  t—\__ 
| 150 | 100 | 100 | 200 | 


Interrupt ee ee | | 


Figure 10-3. Example of Double Buffering Function 
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TIMER INITIALIZATION USING MANUAL UPDATE BIT AND INVERTER BIT 


An auto reload operation of the timer occurs when the down counter reaches 0. So, a starting value of the TCNTn has 
to be defined by the user in advance. In this case, the starting value has to be loaded by the manual update bit. The 
following steps describe how to start a timer: 


1) Write the initial value into TCNTBn and TCMPBn. 


2) Set the manual update bit of the corresponding timer. It is recommended that you configure the inverter on/off bit. 
(whether use inverter or not). 


3) Set start bit of the corresponding timer to start the timer (and clear the manual update bit). 


If the timer is stopped by force, the TCNTn retains the counter value and is not reloaded from TCNTBn. If a new value 
has to be set, perform manual update. 


NOTE 


Whenever TOUT inverter on/off bit is changed, the TOUTn logic value will also be changed whether the timer 
runs. Therefore, it is desirable that the inverter on/off bit is configured with the manual update bit. 
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TIMER OPERATION 


om vt tf tt 


50! 110 140140 120 60 | 


Figure 10-4. Example of a Timer Operation 


Figure 10-4 shows the result of the following procedure: 


1. 


11. 


Enable the auto reload function. Set the TCNTBn to 160 (50+110) and the TCMPBn to 110. Set the manual 
update bit and configure the inverter bit (on/off). The manual update bit sets TCNTn and TCMPn to the values of 
TCNTBn and TCMPBn, respectively. 


And then, set the TCNTBn and the TCMPEBn to 80 (40+40) and 40, respectively, to determine the next reload 
value. 


Set the start bit, provided that manual_update is 0 and the inverter is off and auto reload is on. The timer starts 
counting down after latency time within the timer resolution. 


When the TCNTn has the same value as that of the TCMPn, the logic level of the TOUTn is changed from low to 
high. 


When the TCNTn reaches 0, the interrupt request is generated and TCNTBn value is loaded into a temporary 
register. At the next timer tick, the TCNTn is reloaded with the temporary register value (TCNTBn). 


In Interrupt Service Routine (ISR), the TCNTBn and the TCMPBn are set to 80 (20+60) and 60, respectively, for 
the next duration. 


When the TCNTn has the same value as the TCMPn, the logic level of TOUTn is changed from low to high. 


When the TCNTn reaches 0, the TCNTn is reloaded automatically with the TCNTBn, triggering an interrupt 
request. 


In Interrupt Service Routine (ISR), auto reload and interrupt request are disabled to stop the timer. 


When the value of the TCNTn is same as the TCMPn, the logic level of the TOUTn is changed from low to high. 


. Even when the TCNTn reaches 0, the TCNTn is not any more reloaded and the timer is stopped because auto 


reload has been disabled. 


No more interrupt requests are generated. 
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PULSE WIDTH MODULATION (PWM) 


t t f 


Write Write Write 
TCMPBn = 60 TCMPBn = 40 TCMPBn = 30 
Write Write Write 


TCMPBn = 50 TCMPBn = 30 TCMPBn = Next PWM Value 


Figure 10-5. Example of PWM 


PWM function can be implemented by using the TCMPBn. PWM frequency is determined by TCNTBn. Figure 10-5 
shows a PWM value determined by TCMPBn. 


For a higher PWM value, decrease the TCMPBn value. For a lower PWM value, increase the TCMPBn value. If an 
output inverter is enabled, the increment/decrement may be reversed. 


The double buffering function allows the TCMPBn, for the next PWM cycle, written at any point in the current PWM 
cycle by ISR or other routine. 


ELECTRONICS 10-7 


PWM TIMER S$3C2410A 


OUTPUT LEVEL CONTROL 


Inverter off 


i} 
! 
i} 
i} 
ee Le 
Inverter on 


' 
Initial State Period 1 | Period2 =| Timer Stop 


Figure 10-6. Inverter On/Off 


The following procedure describes how to maintain TOUT as high or low (assume the inverter is off): 
1. Turn off the auto reload bit. And then, TOUTn goes to high level and the timer is stopped after the TCNTn reaches 
0 (recommended). 


2. Stop the timer by clearing the timer start/stop bit to 0. If TCNTn < TCMPn, the output level is high. If TCNTn 
>TCMPn, the output level is low. 


3. The TOUTn can be inverted by the inverter on/off bit in TCON. The inverter removes the additional circuit to 
adjust the output level. 
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DEAD ZONE GENERATOR 


The dead zone is for the PWM control in a power device. This function enables the insertion of the time gap between 
a turn-off of a switching device and a turn on of another switching device. This time gap prohibits the two switching 
devices from being turned on simultaneously, even for a very short time. 


TOUTO is the PWM output. nTOUTO is the inversion of the TOUTO. If the dead zone is enabled, the output wave form 
of TOUTO and nTOUTO will be TOUTO_DZ and nTOUTO_DZ, respectively. nTOUTO_DZ is routed to the TOUT1 pin. 


In the dead zone interval, TOUTO_DZ and nTOUTO_DZ can never be turned on simultaneously. 


Deadzone 
Interval 


TOUTO_DZ | Pl PPpiply 


| + 


Figure 10-7. The Wave Form When a Dead Zone Feature is Enabled 
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DMA REQUEST MODE 


The PWM timer can generate a DMA request at every specific time. The timer keeps DMA request signals 
(nNDMA_REQ) low until the timer receives an ACK signal. When the timer receives the ACK signal, it makes the 
request signal inactive. The timer, which generates the DMA request, is determined by setting DMA mode bits (in 
TCFG1 register). If one of timers is configured as DMA request mode, that timer does not generate an interrupt 
request. The others can generate interrupt normally. 


DMA mode configuration and DMA / interrupt operation 


Toot [Nese [NT NT 
[0001 [tine (ore oN [ono 


INT4tmp 


DMAreq_en 101 


nDMA_ACK 
nDMA_REQ | 


INT4 


Figure 10-8. Timer4 DMA Mode Operation 
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PWM TIMER CONTROL REGISTERS 


TIMER CONFIGURATION REGISTERO (TCFGO) 


Timer input clock Frequency = PCLK / {prescaler value+1} / {divider value} 
{prescaler value} = 0~255 
{divider value} = 2, 4, 8, 16 


TCFGO | _0x51000000 Configures the two 8-bit prescalers 0x00000000 
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TIMER CONFIGURATION REGISTER1 (TCFG1) 


S3C2410A 


TCFG1 | 0x51000004 5-MUX & DMA mode selecton register 0x00000000 


DMA mode [23:20] | Select DMA request channel 
0000 = No select (all interrupt) 0001 = TimerO 
0010 = Timer 0011 = Timer2 
0100 = Timer3 0101 = Timer4 
0110 = Reserved 


MUX 4 [19:16] | Select MUX input for PWM Timer4. 
0000 = 1/2 0001=1/4 0010 =1/8 
0011=1/16 01xx = External TCLK1 


MUX 3 [15:12] | Select MUX input for PWM Timers. 
0000 = 1/2 0001=1/4 0010=1/8 
0011 =1/16 O1xx = External TCLK1 
MUX 2 [11:8] | Select MUX input for PWM Timer2. 
0000 = 1/2 0001=1/4 0010=1/8 
0011 =1/16 O1xx = External TCLK1 
MUX 1 [7:4] Select MUX input for PWM Timert. 
0000 = 1/2 0001=1/4 0010=1/8 
0011 = 1/16 O1xx = External TCLKO 
MUX 0 [3:0] Select MUX input for PWM Timer0. 
0000 = 1/2 0001=1/4 0010=1/8 
0011 =1/16 O1xx = External TCLKO 
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TIMER CONTROL (TCON) REGISTER 


Rw 


TCON Description Initial state 


Timer 4 auto reload on/off [22] | Determine auto reload on/off for Timer 4. 

0 = One-shot 1 = Interval mode (auto reload 
Timer 4 manual update (note [21] | Determine the manual update for Timer 4. 

0 = No operation 1 = Update TCNTB4 


) 
) 
Timer 4 start/stop [20] | Determine start/stop for Timer 4. 
0 = Stop 1 = Start for Timer 4 
Timer 3 auto reload on/off [19] | Determine auto reload on/off for Timer 3. 
0 = One-shot 1 = Interval mode (auto reload) 
) 


[18 


Determine output inverter on/off for Timer 3. 


0 = Inverter off 1 = Inverter on for TOUT3 


Timer 3 output inverter on/off i 
Timer 3 manual update (note man 
Timer 3 start/stop Determine start/stop for Timer 3. 

0 = Stop 1 = Start for Timer 3 
Timer 2 auto reload on/off [ Determine auto reload on/off for Timer 2. 

0 = One-shot 1 = Interval mode (auto reload) 


[17] | Determine manual update for Timer 3. 


0 = No operation 1 = Update TCNTB3 & TCMPB3 


1 
[1 
1 


] 
6] 
5] 


Timer 2 output inverter on/off [14] | Determine output inverter on/off for Timer 2. 

O = Inverter off 1 = Inverter on for TOUT2 
Timer 2 manual update ("°te) [13] | Determine the manual update for Timer 2. 

0=No operation 1 = Update TCNTB2 & TCMPB2 
Timer 2 start/stop [12] | Determine start/stop for Timer 2. 

0 = Stop 1 = Start for Timer 2 
Timer 1 auto reload on/off [11] | Determine the auto reload on/off for Timer1. 

0 = One-shot 1 = Interval mode (auto reload) 
Timer 1 output inverter on/off [10] | Determine the output inverter on/off for Timer. 

O = Inverter off 1 = Inverter on for TOUT1 


Timer 1 manual update (ote) Determine the manual update for Timer 1. 


0=No operation 1 = Update TCNTB1 & TCMPB1 
Timer 1 start/stop 


Determine start/stop for Timer 1. 
NOTE: The bits have to be cleared at next writing. 


0 = Stop 1 = Start for Timer 1 
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S3C2410A 


vs [Reed SSC~—C~S~SSC 


Dead zone enable [4] | Determine the dead zone operation. 
0 = Disable 1 = Enable 
Timer 0 auto reload on/off [3] | Determine auto reload on/off for Timer 0. 
0 = One-shot 1 = Interval mode(auto reload) 


Timer 0 output inverter on/off [2] | Determine the output inverter on/off for Timer 0. 

0 = Inverter off 1 = Inverter on for TOUTO 
Timer 0 manual update ("°te) [1] Determine the manual update for Timer 0. 

0 =No operation 1 = Update TCNTBO & TCMPBO 
Timer 0 start/stop Determine start/stop for Timer 0. 

0 = Stop 1 = Start for Timer 0 


NOTE: The bit have to be cleared at next writing. 
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TIMER 0 COUNT BUFFER REGISTER & COMPARE BUFFER REGISTER (TCNTBO/TCMPBO) 


TCNTBO 0x5100000C Timer 0 count buffer register 0x00000000 
TCMPBO 0x51000010 Timer 0 compare buffer register 0x00000000 


Timer 0 compare buffer register [15:0] Set compare buffer value for Timer 0 0x00000000 


Timer 0 count buffer register [15:0] Set count buffer value for Timer 0 0x00000000 


TIMER 0 COUNT OBSERVATION REGISTER (TCNTOO) 


TCNTOO oxs1000014 | oR Timer 0 count observation register 0x00000000 


Timer 0 observation register [15:0] Set count observation value for Timer 0 0x00000000 
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TIMER 1 COUNT BUFFER REGISTER & COMPARE BUFFER REGISTER (TCNTB1/TCMPB1) 


TCNTB1 0x51000018 Timer 1 count buffer register 0x00000000 
TCMPB1 0x5100001C Timer 1 compare buffer register 0x00000000 


Timer 1 compare buffer register [15:0] Set compare buffer value for Timer 1 0x00000000 
Timer 1 count buffer register [15:0] Set count buffer value for Timer 1 0x00000000 


TIMER 1 COUNT OBSERVATION REGISTER (TCNTO1) 


TCNTO1 0x51000020 | oR | Timer 1 count observation register 0x00000000 


Timer 1 observation register [15:0] Set count observation value for Timer 1 0x00000000 
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TIMER 2 COUNT BUFFER REGISTER & COMPARE BUFFER REGISTER (TCNTB2/TCMPB2) 


TCNTB2 0x51000024 Timer 2 count buffer register 0x00000000 
TCMPB2 0x51000028 R/W Timer 2 compare buffer register 0x00000000 


Timer 2 compare buffer register [15:0] Set compare buffer value for Timer 2 0x00000000 


[15:0] Set count buffer value for Timer 2 0x00000000 
TCNTO2 0x5100002C Re Timer 2 count observation register 0x00000000 


| Timer 2 observation register | [15:0] Set count observation value for Timer 2 0x00000000 
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TIMER 3 COUNT BUFFER REGISTER & COMPARE BUFFER REGISTER (TCNTB3/TCMPB3) 


TCNTB3 0x51000030 Timer 3 count buffer register 0x00000000 
TCMPB3 0x51000034 R/W Timer 3 compare buffer register 0x00000000 


TCMPB3 
Timer 3 compare buffer register 


[15:0] Set compare buffer value for Timer 3 0x00000000 


[15:0] Set count buffer value for Timer 3 0x00000000 


TIMER 3 COUNT OBSERVATION REGISTER (TCNTO3) 


TCNTO3 0x51000038 Timer 3 count observation register 0x00000000 


[15:0] Set count observation value for Timer 3 0x00000000 


TCNTB3 


Timer 3 count buffer register 


TCNTO3 


Timer 3 observation register 


10-18 ELECTRONICS 


$3C2410A 


Uv 
= 
= 
= 
= 
m 
Bs) 


TIMER 4 COUNT BUFFER REGISTER (TCNTB4) 


TCNTB4 0x5100003C Timer 4 count buffer register 0x00000000 


Timer 4 count buffer register [15:0] Set count buffer value for Timer 4 0x00000000 


TIMER 4 COUNT OBSERVATION REGISTER (TCNTO4) 


TCNTO4 0x51000040 Timer 4 count observation register 0x00000000 


Timer 4 observation register [15:0] Set count observation value for Timer 4 0x00000000 
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OVERVIEW 


The $3C2410A UART (Universal Asynchronous Receiver and Transmitter) provides three independent asynchronous 
serial I/O (SIO) ports, each of which can operate in Interrupt-based or DMA-based mode. In other words, the UART 
can generate an interrupt or a DMA request to transfer data between CPU and the UART. The UART can support bit 
rates of up to 230.4K bps using system clock. If an external device provides the UART with UEXTCLK, then the 
UART can operate at higher speed. Each UART channel contains two 16-byte FIFOs for receive and transmit. 


The S3C2410A UART includes programmable baud rates, infra-red (IR) transmit/receive, one or two stop bit insertion, 
5-bit, 6-bit, 7-bit or 8-bit data width and parity checking. 


Each UART contains a baud-rate generator, a transmitter, a receiver and a control unit, as shown in Figure11-1. The 
baud-rate generator can be clocked by PCLK or UEXTCLK. The transmitter and the receiver contain 16-byte FIFOs 
and data shifters. Data is written to FIFO and then copied to the transmit shifter before being transmitted. The data 
is then shifted out by the transmit data pin (TxDn). Meanwhile, received data is shifted from the receive data pin 
(RxDn), and then copied to FIFO from the shifter. 


FEATURES 


— RxDO, TxDO, RxD1, TxD1, RxD2, and TxD2 with DMA-based or interrupt-based operation 
— UART Ch0O, 1, and 2 with IrDA 1.0 & 16-byte FIFO 
— UART Ch 0 and 1 with nRTSO, nCTSO, nRTS1, and nCTS1 


— Supports handshake transmit/receive 
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BLOCK DIAGRAM 


Peripheral BUS Transmitter 


Transmit FIFO Register 
(FIFO mode) 


Transmit Buffer 
Register(16 Byte 
g ( yte) Transmit Holding Register 
(Non-FIFO mode) 


Transmit Shifter 


Control aoc: Buad-rate 
Unit Generator 


Receiver 
Receive Shifter 


Receive Holding Register 


Receive Buffer (Non-FIFO mode only) 


Register(16 Byte) 


Receive FIFO Register 
(FIFO mode) 


In FIFO mode, all 16 Byte of Buffer register are used as FIFO register. 
In non-FIFO mode, only 1 Byte of Buffer register is used as Holding register. 


Figure 11-1. VART Block Diagram (with FIFO) 
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UART OPERATION 


The following sections describe the UART operations that include data transmission, data reception, interrupt 
generation, baud-rate generation, Loopback mode, Infra-red mode, and auto flow control. 
Data Transmission 


The data frame for transmission is programmable. It consists of a start bit, 5 to 8 data bits, an optional parity bit and 
1 to 2 stop bits, which can be specified by the line control register (ULCONn). The transmitter can also produce the 
break condition, which forces the serial output to logic 0 state for one frame transmission time. This block transmits 
break signals after the present transmission word is transmitted completely. After the break signal transmission, it 
continuously transmits data into the Tx FIFO (Tx holding register in the case of Non-FIFO mode). 


Data Reception 


Like the transmission, the data frame for reception is also programmable. It consists of a start bit, 5 to 8 data bits, 
an optional parity bit and 1 to 2 stop bits in the line control register (ULCONn). The receiver can detect overrun error 
and frame error. 


— The overrun error indicates that new data has overwritten the old data before the old data has been read. 


— The frame error indicates that the received data does not have a valid stop bit. 


Receive time-out condition occurs when it does not receive any data during the 3 word time (this interval follows the 
setting of Word Length bit) and the Rx FIFO is not empty in the FIFO mode. 
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Auto Flow Control (AFC) 


The S3C2410A's UART 0 and UART 1 support auto flow control with nRTS and nCTS signals. In case, it can be 
connected to external UARTs. If users want to connect a UART to a Modem, disable auto flow control bit in 
UMCONhn register and control the signal of nRTS by software. 


In AFC, nRTS depends on the condition of the receiver and nCTS signals control the operation of the transmitter. The 
UART's transmitter transfers the data in FIFO only when nCTS signals are activated (in AFC, nCTS means that other 
UART's FIFO is ready to receive data). Before the UART receives data, nRTS has to be activated when its receive 
FIFO has a spare more than 2-byte and has to be inactivated when its receive FIFO has a spare under 1-byte (in 
AFC, nRTS means that its own receive FIFO is ready to receive data). 


Transmission case in Reception case in 
UART A UART A 


Figure 11-2. UART AFC Interface 


NOTE 
UART 2 does not support AFC function, because the S8C2410A has no nRTS2 and nCTS2. 


Example of Non Auto-Flow control (controlling nRTS and nCTS by software) 
Rx operation with FIFO 
1. Select receive mode (Interrupt or DMA mode). 


2. Check the value of Rx FIFO count in UFSTATn register. If the value is less than 15, users have to set the value of 
UMCON?[0] to '1' (activating nRTS), and if it is equal or larger than 15 users have to set the value to '0' 
(inactivating nRTS). 


3. Repeat the Step 2. 


Tx operation with FIFO 
1. Select transmit mode (Interrupt or DMA mode). 
2. Check the value of UMSTATn[0]. If the value is '1' (activating nCTS), users write the data to Tx FIFO register. 
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RS-232C interface 


If users want to connect the UART to modem interface (instead of null modem), nRTS, nCTS, nDSR, nDTR, DCD and 
nRI signals are needed. In this case, the users can control these signals with general I/O ports by software because 
the AFC does not support the RS-232C interface. 


Interrupt/DMA Request Generation 


Each UART of the S3C2410A has five status (Tx/Rx/Error) signals: Overrun error, Frame error, Receive buffer data 
ready, Transmit buffer empty, and Transmit shifter empty, all of which are indicated by the corresponding UART 
status register (UTRSTATn/UERSTATn). 


The overrun error and frame error are referred to as the receive error status, each of which can cause the receive error 
status interrupt request, if the receive-error-status-interrupt-enable bit is set to one in the control register, UCONn. 
When a receive-error-status-interrupt-request is detected, the signal causing the request can be identified by reading 
the value of UERSTSTn. 


When the receiver transfers the data of the receive shifter to the receive FIFO register in FIFO mode and the number 
of received data reaches Rx FIFO Trigger Level, Rx interrupt is generated, if Receive mode in control register 
(UCONn) is selected as 1 (Interrupt request or polling mode). 

In the Non-FIFO mode, transferring the data of the receive shifter to the receive holding register will cause Rx 
interrupt under the Interrupt request and polling mode. 


When the transmitter transfers data from its transmit FIFO register to its transmit shifter and the number of data left 
in transmit FIFO reaches Tx FIFO Trigger Level, Tx interrupt is generated, if Transmit mode in control register is 
selected as Interrupt request or polling mode. 

In the Non-FIFO mode, transferring data from the transmit holding register to the transmit shifter will cause Tx 
interrupt under the Interrupt request and polling mode. 


If the Receive mode and Transmit mode in control register are selected as the DMAn request mode then DMAn 
request occurs instead of Rx or Tx interrupt in the situation mentioned above. 


Table 11-1. Interrupts in Connection with FIFO 


FIFO Mode Non-FIFO Mode 


Rx interrupt Generated whenever receive data reaches the Generated by the receive holding register 
trigger level of receive FIFO. whenever receive buffer becomes full. 


Generated when the number of data in FIFO does 
not reaches Rx FIFO trigger Level and does not 
receive any data during 3 word time (receive time 
out). This interval follows the setting of Word Length 
bit. 


Tx interrupt Generated whenever transmit data reaches the Generated by the transmit holding register 
trigger level of transmit FIFO (Tx FIFO trigger Level). | whenever transmit buffer becomes empty. 


Error interrupt Generated when frame error has detected. Generated by all errors. However if another 
error occurs at the same time, only one 
interrupt is generated. 


Generated when it gets to the top of the receive 
FIFO without reading out data in it (overrun error). 
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UART Error Status FIFO 


UART has the error status FIFO besides the Rx FIFO register. The error status FIFO indicates which data, among 
FIFO registers, is received with an error. The error interrupt will be issued only when the data, which has an error, is 
ready to read out. To clear the error status FIFO, the URXHn with an error and UERSTATn must be read out. 


For example, 

It is assumed that the UART Rx FIFO receives A, B, C, and D characters sequentially and the frame error occurs 
while receiving 'B'. 

The actual UART receive error will not generate any error interrupt because the character, which was received with an 


error, has not been read yet. The error interrupt will occur when the character is read out. 


Figure 11-3 shows the UART receiving the four characters including the one error. 


[SequenceFiow | ____Evrorinterupt «| —SCNote 
F Whennocharacterisreadout | 
PABGandDisrecced | 
The frame error (in B) interrupt occurs. | The 'B' has to be read out. 


Zz RX-FIFO 7] Error Status-FIFO 
Frame Error 


UERSTATn Error Status Generator Unit 


Figure 11-3. UART Receiving 4 Characters with 1 Error 
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Baud-Rate Generation 


Each UART's baud-rate generator provides the serial clock for the transmitter and the receiver. The source clock for 
the baud-rate generator can be selected with the S8C2410A's internal system clock or UEXTCLK. In other words, 
dividend is selectable by setting Clock Selection of UCONn. The baud-rate clock is generated by dividing the source 
clock (PCLK or UEXTCLK) by 16 and a 16-bit divisor specified in the UART baud-rate divisor register (UBRDIVn). The 
UBRDIVn can be determined by the following expression: 


UBRDIVn = (int)(PCLK/(bps x 16) ) -1 
Where, the divisor should be from 1 to (218-1). 


For accurate UART operation, the S8C2410A also supports UEXTCLK as a dividend. 

If the S3C2410A uses UEXTCLK, which is supplied by an external UART device or system, then the serial clock of 
UART is exactly synchronized with UEXTCLK. So, the user can get the more precise UART operation. The UBRDIVn 
can be determined: 


UBRDIVn = (int)(UEXTCLK / (bps x 16) ) —1 
Where, the divisor should be from 1 to (2'®-1) and UEXTCLK should be smaller than PCLK. 
For example, if the baud-rate is 115200 bps and PCLK or UEXTCLK is 40 MHz, UBRDIVn is determined: 


UBRDIVn = (int)(40000000/(115200 x 16)) -1 
= (int)(21.7) -1 
291-41 =20 


Baud-Rate Error Tolerance 

UART Frame error should be less than 1.87%(3/160). 

tUPCLK = (UBRDIVn + 1) x 16 x 1Frame / PCLK tUPCLK : Real UART Clock 
tUEXACT = 1Frame / baud-rate tUEXACT : Ideal UART Clock 
UART error = (t\UPCLK — tUEXACT) / tUEXACT x 100% 


NOTES 


1. 1Frame = start bit + data bit + parity bit + stop bit. 
2. In specific condition, we can support baud rate up to 921.6K bps. For example, when PCLK is 60MHz, 
you can use baud rate of 921.6K bps under UART error of 1.69%. 


Loopback Mode 


The S3C2410A UART provides a test mode referred to as the Loopback mode, to aid in isolating faults in the 
communication link. This mode structurally enables the connection of RXD and TXD in the UART. In this mode, 
therefore, transmitted data is received to the receiver, via RXD. This feature allows the processor to verify the internal 
transmit and to receive the data path of each SIO channel. This mode can be selected by setting the loopback bit in 
the UART control register (UCONn). 
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Infra-Red (IR) Mode 


The S3C2410A UART block supports infra-red (IR) transmission and reception, which can be selected by setting the 
Infra-red-mode bit in the UART line control register (ULCONn). Figure 11-4 illustrates how to implement the IR mode. 


In IR transmit mode, the transmit pulse comes out at a rate of 3/16, the normal serial transmit rate (when the 
transmit data bit is zero); In IR receive mode, the receiver must detect the 3/16 pulsed period to recognize a zero 
value (see the frame timing diagrams shown in Figure 11-6 and 11-7). 


IrDA Tx IrDA Rx 
Encoder Decoder 


Figure 11-4. IrDA Function Block Diagram 
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tH____—_—_ S|0 Frame ———____—____ > 


—+>| Start |< —————_ Datta Bits ————————_ | Stop |<— 


Figure 11-5. Serial I/O Frame Timing Diagram (Normal UART) 


+ IR Transmit Frame ————————______> 


>| Start | 4-—__——__ Datta Bits ——————____> | Stop 


—»| |< — Pulse Width = 3/16 Bit Frame 


Figure 11-6. Infra-Red Transmit Mode Frame Timing Diagram 


+—_—_———__ IR Receive Frame ————————————_»> 


—> | Start |} Datta Bits —————————_ | Stop |4— 


Figure 11-7. Infra-Red Receive Mode Frame Timing Diagram 
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UART SPECIAL REGISTERS 


UART LINE CONTROL REGISTER 


There are three UART line control registers including ULCONO, ULCON1, and ULCON2 in the UART block. 


_OOOCC“‘“S 


Infra-Red Mode Determine whether or not to use the Infra-Red mode. 
0 = Normal mode operation 
1 = Infra-Red Tx/Rx mode 


Number of Stop Bit [ Specify how many stop bits are to be used for end-of-frame 
signal. 
0 = One stop bit per frame 
1 = Two stop bit per frame 

Word Length [1:0] Indicate the number of data bits to be transmitted or received per 
frame. 
00 =5-bit 01 =6-bit 
10=7-bit 11 =8-bit 


Parity Mode [5:3] Specify the type of parity generation and checking during UART 
transmit and receive operation. 
Oxx = No parity 
100 = Odd parity 
101 = Even parity 
110 = Parity forced/checked as 1 
111 = Parity forced/checked as 0 
. _ 
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UART CONTROL REGISTER 


There are three UART control registers including UCONO, UCON1 and UCON2 in the UART block. 


Clock Selection [10] | Select PCLK or UEXTCLK for the UART baud rate. 


0=PCLK : UBRDIVn = (int)(PCLK / (bps x 16) ) -1 
1=UEXTCLK(@GPH8) : UBRDIVn = (int)(UEXTCLK / (bps x 16) ) -1 


Tx Interrupt Type Interrupt request type. 


0 = Pulse (Interrupt is requested as soon as the Tx buffer becomes 
empty in Non-FIFO mode or reaches Tx FIFO Trigger Level in FIFO 
mode.) 

1 = Level (Interrupt is requested while Tx buffer is empty in Non-FIFO 
mode or reaches Tx FIFO Trigger Level in FIFO mode.) 


Interrupt request type. 

0 = Pulse (Interrupt is requested the instant Rx buffer receives the 

data in Non-FIFO mode or reaches Rx FIFO Trigger Level in FIFO 

mode.) 

1 = Level (Interrupt is requested while Rx buffer is receiving data in 

Non-FIFO mode or reaches Rx FIFO Trigger Level in FIFO mode.) 

Rx Time Out Enable/Disable Rx time out interrupt when UART FIFO is enabled. oe 

a 
| oo 


Rx Interrupt Type 


Enable The interrupt is a receive interrupt. 
0 = Disable 1 = Enable 


Enable the UART to generate an interrupt upon an exception, such as 
a frame error, or overrun error during a receive operation. 


Rx Error Status 
Interrupt Enable 


0 = Do not generate receive error status interrupt. 
1 = Generate receive error status interrupt. 


Loopback Mode Setting loopback bit to 1 causes the UART to enter the loopback 


mode. This mode is provided for test purposes only. 
0 = Normal operation 1 = Loopback mode 


Reserved 


Reserved 
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UART CONTROL REGISTER (Continued) 


Transmit Mode [3:2] | Determine which function is currently able to write Tx data to the 
UART transmit buffer register. (UART Tx Enable/Disable) 
00 = Disable 
01 = Interrupt request or polling mode 
10 = DMAO request (Only for UARTO), 
DMAS request (Only for UART2) 
11 = DMA1 request (Only for UART1) 


Receive Mode [1:0] | Determine which function is currently able to read data from UART 
receive buffer register. (UART Rx Enable/Disable) 
00 = Disable 
01 = Interrupt request or polling mode 
10 = DMAO request (Only for UARTO), 
DMAS request (Only for UART2) 
11 = DMA1 request (Only for UART1) 


NOTE: When the UART does not reach the FIFO trigger level and does not receive data during 3 word time in DMA receive 
mode with FIFO, the Rx interrupt will be generated (receive time out), and the users should check the FIFO status 
and read out the rest. 
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UART FIFO CONTROL REGISTER 


There are three UART FIFO control registers including UFCONO, UFCON1 and UFCON2 in the UART block. 


Tx FIFO Trigger Level Determine the trigger level of transmit FIFO. 
00 = Empty 01 = 4-byte 
10 = 8-byte 11 = 12-byte 


Rx FIFO Trigger Level Determine the trigger level of receive FIFO. 
00 = 4-byte 01 = 8-byte 
10 = 12-byte 11 = 16-byte 


Ce 


Tx FIFO Reset [2] | Auto-cleared after resetting FIFO 

0 = Normal 1= Tx FIFO reset 
Rx FIFO Reset [1] | Auto-cleared after resetting FIFO 

0 = Normal 1= Rx FIFO reset 


FIFO Enable om 0 = Disable 1 = Enable 


NOTE: When the UART does not reach the FIFO trigger level and does not receive data during 3 word time in DMA receive 
mode with FIFO, the Rx interrupt will be generated (receive time out), and the users should check the FIFO status 
and read out the rest. 
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UART MODEM CONTROL REGISTER 


There are two UART MODEM control registers including UMCONO and UMCON1 in the UART block. 


[Resener | ons0000000 | - [Reseed 


[7:5] | These bits must be 0's 
Auto Flow Control (AFC) [4] |0= Disable 1 = Enable 


Reserved [3:1] | These bits must be 0's 


Request to Send If AFC bit is enabled, this value will be ignored. In this case 
the S3C2410A will control nRTS automatically. 
If AFC bit is disabled, nNRTS must be controlled by software. 
0 ='H' level (Inactivate nRTS) 


1 ='L' level (Activate nRTS) 


NOTE: UART 2 does not support AFC function, because the S3C2410A has no nRTS2 and nCTS2. 
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UART TX/RX STATUS REGISTER 


There are three UART Tx/Rx status registers including UTRSTATO, UTRSTAT1 and UTRSTAT2 in the UART block. 


Turasraro [160000010 | _R[UART chanel OT sausregiier [xe 
TT urasrari | ox6ooo4o10 | R[UART channel Tux status register [ox 
[Turasrara | oxsooo0010 | [UART channel 2 Tux status register [ox 


Transmitter empty Set to 1 automatically when the transmit buffer register has 
no valid data to transmit and the transmit shift register is 
empty. 

0 = Not empty 
1 = Transmitter (transmit buffer & shifter register) empty 


Receive buffer data ready Set to 1 automatically whenever receive buffer register 
contains valid data, received over the RXDn port. 


0 = Empty 
1 = The buffer register has a received data 
(In Non-FIFO mode, Interrupt or DMA is requested) 


If the UART uses the FIFO, users should check Rx FIFO 
Count bits and Rx FIFO Full bit in the UFSTAT register 
instead of this bit. 


Transmit buffer empty Set to 1 automatically when transmit buffer register is empty. 
0 =The buffer register is not empty 
1 = Empty 
(In Non-FIFO mode, Interrupt or DMA is requested. 
In FIFO mode, Interrupt or DMA is requested, when Tx 
FIFO Trigger Level is set to OO (Empty)) 
If the UART uses the FIFO, users should check Tx FIFO 
Count bits and Tx FIFO Full bit in the UFSTAT register 
instead of this bit. 
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UART ERROR STATUS REGISTER 


There are three UART Rx error status registers including UERSTATO, UERSTAT1 and UERSTAT2 in the UART 
block. 


[uersraTo | ox6ooo0014 | _R[UART chamelO Rx erorstasregiter [Ox 
[~uensrart | ox6ooodo1a | R[UART chanel 1 Rix eror sts register [Ox 
[uensrara | oxsoooe014 | R[UART chanel 2 Ri eror status register [Ox 


Reserved [3] | 0=No frame error during receive 
1 = Frame error (Interrupt is requested.) 


Frame Error [2] | Set to 1 automatically whenever a frame error occurs during 
receive operation. 
0 = No frame error during receive 
1 = Frame error (Interrupt is requested.) 


Reserved [1] | 0O=No frame error during receive 
1 = Frame error (Interrupt is requested.) 


Overrun Error Set to 1 automatically whenever an overrun error occurs during 
receive operation. 
0 = No overrun error during receive 
1 = Overrun error (Interrupt is requested.) 


NOTE: These bits (UERSATn[3:0]) are automatically cleared to 0 when the UART error status register is read. 
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UART FIFO STATUS REGISTER 


There are three UART FIFO status registers including UFSTAT0, UFSTAT1 and UFSTAT2 in the UART block. 


[urstaro | ox60000018 | _R[UART chamelOFIFO satusreger [oo 
[urstari | ox6ooodo1e [A [UART chanel + FIFO satus register [0x00 
[urstare | osooo001@ | [UART channel FIFO satus register [0000 


Tx FIFO Full 


Set to 1 automatically whenever transmit FIFO is full during 
transmit operation 

0 = 0-byte < Tx FIFO data < 15-byte 

1 = Full 


Tx FIFO Count [7:4] Number of data in Tx FIFO 
Rx FIFO Count [3:0] Number of data in Rx FIFO 


Rx FIFO Full Set to 1 automatically whenever receive FIFO is full during 
receive operation 
0 = 0-byte < Rx FIFO data < 15-byte 
1 = Full 
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UART MODEM STATUS REGISTER 


There are two UART modem status registers including UMSTATO and UMSTAT1 in the UART block. 


[uwsraTo | os60000016 | _R[UART channel 0 Modem sas egter [0x0 
[uwsrart | ox60004016 | R[UART channel 1 Moder stats register [Ox 
[ Resenesr | ons0o0@010 | [Resered Sieh 


Delta CTS [4] Indicate that the nCTS input to the S3C2410A has 
changed state since the last time it was read by CPU. 
(Refer to Figure 11-8.) 
0 = Has not changed 
1 = Has changed 


a 


Clear to Send 0 = CTS signal is not activated (nCTS pin is high.) 
1 = CTS signal is activated (nCTS pin is low.) 


Delta CTS 


Read_UMSTAT 


Figure 11-8. nCTS and Delta CTS Timing Diagram 
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UART TRANSMIT BUFFER REGISTER (HOLDING REGISTER & FIFO REGISTER) 


There are three UART transmit buffer registers including UTXHO, UTXH1 and UTXH2 in the UART block. 


UTXHn has an 8-bit data for transmission data. 
Description Reset Value 


0x50000020(L) 
( 


0x50000023(B) 


UTXH2 0x50008020(L) 
0x50008023(B) 


TXDATAn [7:0] | Transmit data for UARTn Pe 


NOTE: (L): The endian mode is Little endian. 
(B): The endian mode is Big endian. 


UART RECEIVE BUFFER REGISTER (HOLDING REGISTER & FIFO REGISTER) 


There are three UART receive buffer registers including URXHO, URXH1 and URXH2 in the UART block. 
URXHnh has an 8-bit data for received data. 


RXDATAn [7:0] | Receive data for UARTn [2 tee 


NOTE: When an overrun error occurs, the URXHn must be read. If not, the next received data will also make an 
overrun error, even though the overrun bit of UERSTATn had been cleared. 
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UART BAUD RATE DIVISOR REGISTER 


There are three UART baud rate divisor registers including UBRDIVO, UBRDIV1 and UBRDIV2 in the UART block. 
The value stored in the baud rate divisor register (UBRDIVn), is used to determine the serial Tx/Rx clock rate (baud 
rate) as follows: 


UBRDIVn = (int)(PCLK / (bps x 16) ) -1 
or 
UBRDIVn = (int)(UEXTCLK / (bps x 16) ) —1 
Where, the divisor should be from 1 to (2'°-1) and UEXTCLK should be smaller than PCLK. 
For example, if the baud-rate is 115200 bps and PCLK or UEXTCLK is 40 MHz, UBRDIVn is: 


UBRDIVn = (int)(40000000 / (115200 x 16) ) -1 


Ri 
pW | Baudaie dvorregitero—SOSCiSS 
pIW | Baud rate dvsoregtert ——~—SCiSO 
riw [Baud ate dsr regitor?——~—SCSC*dSCOCC 


UBRDIV [15:0] Baud rate division value 
UBRDIVn > 0 
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USB HOST CONTROLLER 


OVERVIEW 


$3C2410A supports 2-port USB host interface as follows: 


e OHCI Rev 1.0 compatible 
e USB Rev1.1 compatible 
e Two down stream ports 


e¢ Support for both LowSpeed and FullSpeed USB devices 


RCFO_RegData(32) 


CONTROL 
HCI_DATA(32) 


CONTROL 


RevData 
APP_MDATA(32) 


oe 


(8) 
(8 


HCF_DATA 
FIFO_DATA(8) 


EXT.FIFO STATUS 


Figure 12-1. USB Host Controller Block Diagram 


aifY 
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USB HOST CONTROLLER SPECIAL REGISTERS 


The S3C2410A USB host controller complies with OHCI Rev 1.0. Refer to Open Host Controller Interface Rev 1.0 
specification for detail information. 


Table 12-1. OHCI Registers for USB Host Controller 


[Heconrel ——*|sa000006 [= a 
HeConmonsiaus [40000008 [= a 
HcneruptSiais | ovte000000 | — a 
Hcnerupténable | 40000010 — =e. 
HclnerupiDeable | oao000014 | — ae 
[HePerodGuten:D | ovss000016[— ad 
[HeConroleadeD | ovao000020 [= a 
[HeContolourenteD | onao0000ee [= Pa 
[HcBukteedeD | oao00002e | — = 
[HeBukCurentD | ovteo00020 | — — 
HedoneHeed | onao000080 [= or 
HeFmRemainng | oaa000008[— = 
[HeFinNumber | oxés000080[— a 
HePerodeSien | oao000040 [= e 
[HeisTresbos | oao00004e [= Pes 
HcRiDesciptr® | owte000080 | — a 
Hernsias ————*|nao000050 [= = 
cRhPonsiaust | oao000054 [= =e 
HeRnPonsiawsa | oao00005@ | — ee 
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USB DEVICE CONTROLLER 


OVERVIEW 


Universal Serial Bus (USB) device controller is designed to provide a high performance full speed function controller 
solution with DMA interface. USB device controller allows bulk transfer with DMA, interrupt transfer and control 
transfer. 


USB device controller supports: 


Full soeed USB device controller compatible with the USB specification version 1.1 
DMA interface for bulk transfer 


Five endpoints with FIFO 

EPO: 16byte (Register) 

EP1: 64byte IN/OUT FIFO (dual port asynchronous RAM): interrupt or DMA 
EP2: 64byte IN/OUT FIFO (dual port asynchronous RAM): interrupt or DMA 
EP3: 64byte IN/OUT FIFO (dual port asynchronous RAM): interrupt or DMA 
EP4: 64byte IN/OUT FIFO (dual port asynchronous RAM): interrupt or DMA 


Integrated USB Transceiver 


FEATURE 


Fully compliant with USB Specification Version 1.1 
Full speed (12Mbps) device 

Integrated USB Transceiver 

Supports control, interrupt and bulk transfer 


Five endpoints with FIFO: 
One bi-directional control endpoint with 16-byte FIFO (EPO) 
Four bi-directional bulk endpoints with 64-byte FIFO (EP1, EP2, EP3, and EP4) 


Supports DMA interface for receive and transmit bulk endpoints. (EP1, EP2, EP3, and EP4) 
Independent 64byte receive and transmit FIFO to maximize throughput 


Supports suspend and remote wakeup function 


NOTE 
PCLK should be more than 20MHz to use USB Device Controller stably. 
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MC_ADDR[13:0] 
MC_DATA_IN[31:0] 
RT_VM_IN 

MC_DATA_OUT[31:0] 
RT_VP_IN ieeneen 
RXD SYS_CLK 
SYS_RESETN 

RT_VP_OUT 
MC_WR 


RT_VM_OUT WR_RDN 


RT_UX_OEN MC_CSN 


MC_INTR 
RT_UXSUSPEND 


DREQNI3:0] 


DACKN[3:0] 


Figure 13-1. USB Device Controller Block Diagram 
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USB DEVICE CONTROLLER SPECIAL REGISTERS 


This section describes detailed functionalities about register sets of USB device controller. 

All special function register is byte-accessible or word-accessible. If you access byte mode offset-address is 

different in little endian and big endian. All reserved bit is zero. 

Common indexed registers depend on INDEX register (INDEX_REG) (offset address: 0x178) value. For example if 

you want to write EPO CSR register, you must write "0x00" on the INDEX_REG before writing IN_CSR1 register. 
NOTE 


All register must be resettled after performing Host Reset Signaling. 


Description Offset Address 


NON INDEXED REGISTERS 
FUNC_ADDR_REG 
PWR_REG 

EP_INT_REG (EPO—EP4) Endpoint interrupt register 0x148 
USB_INT_REG 
EP_INT_EN_REG (EPO-EP4) 
USB_INT_EN_REG 
FRAME_NUM1_REG 
FRAME_NUM2_REG 
INDEX_REG 

EPO_FIFO_REG 
EP1_FIFO_REG 
EP2_FIFO_REG 
EP3_FIFO_REG 
EP4_FIFO_REG 
EP1_DMA_CON 
EP1_DMA_UNIT 
EP1_DMA_FIFO 
EP1_DMA_TTC_L 
EP1_DMA_TTC_M 
EP1_DMA_TTC_H 
EP2_DMA_CON 
EP2_DMA_UNIT 
EP2_DMA_FIFO 
EP2_DMA_TTC_L 


L 
L 
L 


/ 0x143 
/ 0x147 


Function address register 0x140 


=~ 
na 
—= 


Power management register 0x144 


— 
na 
—a 


( 


na 


USB interrupt register 

Endpoint interrupt enable register 

USB Interrupt enable register 

Frame number 1 register 

Frame number 2 register 

Index register 

EndpointO FIFO register 

Endpointi FIFO register 

Endpoint2 FIFO register 

Endpoint3 FIFO register 

Endpoint4 FIFO register 

Endpoint! DMA control register 

Endpoint! DMA unit counter register 

Endpoint! DMA FIFO counter register 

Endpoint! DMA transfer counter low-byte register 
Endpoint! DMA transfer counter middle-byte register 
Endpoint! DMA transfer counter high-byte register 
Endpoint2 DMA control register 

Endpoint2 DMA unit counter register 

Endpoint2 DMA FIFO counter register 


Endpoint2 DMA transfer counter low-byte register 


f 
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USB Device Controller Special Registers (Continued) 


EP3_DMA_CON 
EP3_DMA_UNIT 
EP3_DMA_FIFO 
EP3_DMA_TTC_L 
EP3_DMA_TTC_M 
EP3_DMA_TTC_H 
EP4_DMA_CON 
EP4_DMA_UNIT 
EP4 DMA_FIFO 
EP4 DMA_TTC_L 
EP4_DMA_TTC_M 
EP4_DMA_TTC_H Ox26C(L) / Ox26F(B 


COMMON INDEXED REGISTERS 
MAXP_REG Endpoint MAX packet register 0x180(L) / 0x183(B) 


IN INDEXED REGISTERS 
IN_CSR1_REG/EPO_CSR (L) / 0x187(B) 
) 


IN_CSR2_REG 
OUT INDEXED REGISTERS 
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FUNCTION ADDRESS REGISTER (FUNC_ADDR_REG) 
This register maintains the USB device controller address assigned by the host. The Micro Controller Unit (MCU) 


writes the value received through a SET_ADDRESS descriptor to this register. This address is used for the next 
token. 


FUNC_ADDR_REG 0x52000140(L ae Function address register 0x00 
0x52000143(B (byte) 


ADDR_UPDATE [7] Set by the MCU whenever it updates the 
set ere FUNCTION_ADDR field in this register. This 
bit will be cleared by USB when 
DATA_END bit in EPO_CSR register. 


FUNCTION_ADDR R/W The MCU write the unique address, 
assigned by host, to this field. 
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POWER MANAGEMENT REGISTER (PWR_REG) 


This register acts as a power control register in the USB block. 


PWR_REG 0x52000144(L) R/W Power management register 0x00 
0x52000147(B) (byte) 


(—pwaappr [et | wcU | USB [ Description | iia State | 
a a es 


USB_RESET [3] SET Set by the USB if reset signaling is received 
from the host. This bit remains set as long as 
reset signaling persists on the bus 

MCU_RESUME [2] R Set by the MCU for MCU Resume. 

/CLEAR | The USB generates the resume signaling 
during 10ms, if this bit is set in suspend 
mode. 

| 7 


SUSPEND_MODE [ SET Set by USB automatically when the device 
/CLEAR | enter into suspend mode. 
It is cleared under the following conditions: 
1) The MCU clears the MCU_RESUME bit by 
writing "0", in order to end remote resume 
signaling. 
2) The resume signal form host is received. 


SUSPEND_EN Suspend mode enable control bit 
0 = Disable (default). 
The device will not enter suspend mode. 
1 = Enable suspend mode. 


CU 
R/W 
R/W 
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INTERRUPT REGISTER (EP_INT_REG/USB_INT_REG) 


The USB core has two interrupt registers. 

These registers act as status registers for the MCU when it is interrupted. The bits are cleared by writing a "1" (not 
"0") to each bit that was set. 

Once the MCU is interrupted, MCU should read the contents of interrupt-related registers and write back to clear the 
contents if it is necessary. 


EP_INT_REG 0x52000148(L = EP interrupt pending/clear register 0x00 
0x5200014B(B (byte) 


EP1~EP4 Interrupt [4:1] SET | For BULK/INTERRUPT IN endpoints: 
ere Set by the USB under the following conditions: 
1. IN_PKT_RDY bit is cleared. 
2. FIFO is flushed 
3. SENT_STALL set. 
For BULK/INTERRUPT OUT endpoints: 
Set by the USB under the following conditions: 
1. Sets OUT_PKT_RDY bit 
2. Sets SENT_STALL bit 
NOTE: Conditions 1 and 2 are mutually exclusive. 
EPO Interrupt Correspond to endpoint 0 interrupt. 
eee Set by the USB under the following conditions: 
1. OUT_PKT_RDY bit is set. 
2. IN_PKT_RDY bit is cleared. 
3. SENT_STALL bit is set 
4. SETUP_END bit is set 
5. DATA_END bit is cleared 
(it indicates the end of control transfer). 
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INTERRUPT REGISTER (EP_INT_REG/USB_INT_REG) (Continued) 


USB_INT_REG 0x52000158(L) R/W USB interrupt pending/clear register 0x00 
0x5200015B(B) (byte) 


RESET Interrupt [2] R SET | Set by the USB when it receives reset 
/CLEAR signaling. 


RESUME Interrupt [1] R SET | Set by the USB when it receives resume 
/CLEAR signaling, while_in Suspend mode. 
If the resume occurs due to a USB reset, 
then the MCU is first interrupted with a 
RESUME interrupt. Once the clocks 
resume and the SEO condition persists for 
3ms, USB RESET interrupt will be 
asserted. 
SUSPEND Interrupt R SET Set by the USB when it receives suspend 
/CLEAR signalizing. 
This bit is set whenever there is no activity 
for 3ms on the bus. Thus, if the MCU does 
not stop the clock after the first suspend 
interrupt, it will continue to be interrupted 
every 3ms as long as there is no activity on 
the USB bus. 
By default, this interrupt is disabled. 


NOTE: If the RESET interrupt is occurred, all USB device registers should be re-configured. 
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INTERRUPT ENABLE REGISTER (EP_INT_EN_REG/USB_INT_EN_REG) 


Corresponding to each interrupt register, The USB device controller also has two interrupt enable registers (except 
resume interrupt enable). By default, usb reset interrupt is enabled. 


If bit = 0, the interrupt is disabled. 
If bit = 1, the interrupt is enabled. 


| Register | | Address | | siDescription = | Reset Value | Value 


EP_INT_EN REG 0x5200015C(L =m Determine which interrupt is enabled OxFF 
0x5200015F(B (byte) 


EP4_ INT _EN R/W aa Interrupt Enable bit 
= Interrupt disable 1 = Enable 

EP3_INT_EN R/W Interrupt Enable bit 
= Interrupt disable 1 = Enable 

EP2_INT_EN R/W ae Interrupt Enable bit 1 
= Interrupt disable 1 = Enable 

EP1_INT_EN [1] R/W a Interrupt Enable bit 1 
= Interrupt disable 1 = Enable 


EPO_INT_EN R/W a Interrupt Enable bit 1 
= Interrupt disable 1 = Enable 


USB_INT_EN_REG 0x5200016C(L) | R/W_ | Determine which interrupt is enabled 0x04 
0x5200016F(B) | (byte) 


RESET_INT_EN [2] R/W Reset interrupt enable bit 1 
0 = Interrupt disable 1 = Enable 


Reread Om | - | SCS 


SUSPEND_INT_EN R/W oo interrupt enable bit 
= Interrupt disable 1 = Enable 
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FRAME NUMBER REGISTER (FPAME_NUM1_REG/FRAME_NUM2_REG) 


When the host transfers USB packets, each Start Of Frame (SOF) packet includes a frame number. The USB device 
controller catches this frame number and loads it into this register automatically. 


Ri 


FRAME_NUM1_REG 0x52000170(L) R Frame number lower byte register 0x00 
0x52000173(B) (byte) 


FRAME_NUM1 7:0) | R | W_ | Frame number lower byte value | 00 


FRAME_NUM2_REG 0x52000174(L) R Frame number higher byte register 0x00 
0x52000177(B) (byte) 


FRAME_NUM2 70) | R | W__ | Frame number higher byte value | 00 
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INDEX REGISTER (INDEX_REG) 


The INDEX register is used to indicate certain endpoint registers effectively. The MCU can access the endpoint 
registers (MAXP_REG, IN_CSR1_REG, IN_CSR2_REG, OUT_CSR1_REG, OUT_CSR2_REG, 
OUT_FIFO_CNT1_REG, and OUT_FIFO_CNT2_REG) for an endpoint inside the core using the INDEX register. 


Ri 


INDEX_REG 0x52000178(L) R/W Register index register 0x00 
0x5200017B(B) (byte) 


INDEX [7:0] | Rw | R | Indicate a certain endpoint | 00 
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END POINTO CONTROL STATUS REGISTER (EPO_CSR) 


This register has the control and status bits for Endpoint 0. Since a control transaction is involved with both IN and 
OUT tokens, there is only one CSR register, mapped to the IN CSR1 register. (share IN1_CSR and can access by 
writing index register "0" and read/write IN1_CSR) 


EPO_CSR 0x52000184(L cm Endpoint 0 status register 0x00 
0x52000187(B (byte) 


SERVICED _SETUP_E [7] WwW CLEAR | The MCU should write a "1" to this bit to 
ND clear SETUP_END. 

SERVICED_OUT __ Ww CLEAR | The MCU should write a "1" to this bit to 
PKT_RDY clear OUT_PKT_RDY. 


SEND_STALL CLEAR | MCU should write a "1" to this bit at the 
same time it clears OUT_PKT_RDY, if it 
decodes an invalid token. 

0 = Finish the STALL condition 

1 = The USB issues a STALL and shake to 
the current control transfer. 

SETUP_END Set by the USB when a control transfer 

ends before DATA_END is set. 
When the USB sets this bit, an interrupt is 
generated to the MCU. 
When such a condition occurs, the USB 
flushes the FIFO and invalidates MCU 
access to the FIFO. 


DATA_END SET Set by the MCU on the conditions below: 
1. After loading the last packet of data into 
the FIFO, at the same time IN_PKT_RDY is 
set. 
2. While it clears OUT_PKT_RDY after 
unloading the last packet of data. 
3. For a zero length data phase. 


SENT_STALL [2] Set by the USB if a control transaction is 
stopped due to a protocol violation. An 
interrupt is generated when this bit is set. 
The MCU should write "0" to clear this bit. 
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END POINTO CONTROL STATUS REGISTER (EP0_CSR) (Continued) 


IN_PKT_RDY [1] SET CLEAR | Set by the MCU after writing a packet of data 
into EPO FIFO. The USB clears this bit once 
the packet has been successfully sent to the 
host. An interrupt is generated when the USB 
clears this bit, so as the MCU to load the next 
packet. For a zero length data phase, the 
MCU sets DATA_END at the same time. 


OUT_PKT_RDY SET Set by the USB once a valid token is written 
to the FIFO. An interrupt is generated when 
the USB sets this bit. The MCU clears this bit 
by writing a "1" to the 
SERVICED_OUT_PKT_RDY bit. 
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END POINT IN CONTROL STATUS REGISTER (IN_CSR1_REG/IN_CSR2_REG) 


IN_CSR1_REG 0x52000184(L) R/W IN END POINT control status register1 0x00 
0x52000187(B) (byte) 


Cmcesna Res [en [ wou [ Use [Description —————~nia State 
ewes Pm ff 


CLR_DATA_ 
TOGGLE 


SENT_STALL 


SEND_STALL 


FIFO_FLUSH 


Used in Set-up procedure. 

0: There are alternation of DATAO and DATA1 
1: The data toggle bit is cleared and PID in 
packet will maintain DATAO 


Set by the USB when an IN token issues a 
STALL handshake, after the MCU sets 
SEND_STALL bit to start STALL handshaking. 
When the USB issues a STALL handshake, 
IN_PKT_RDY is cleared 


0: The MCU clears this bit to finish the 
STALL condition. 

1: The MCU issues a STALL handshake to 
the USB. 

Set by the MCU if it intends to flush the 
packet in Input-related FIFO. This bit is 
cleared by the USB when the FIFO is flushed. 
The MCU is interrupted when this happens. If 
a token is in process, the USB waits until the 
transmission is complete before FIFO flushing. 
If two packets are loaded into the FIFO, only 
first packet (The packet is intended to be sent 


to the host) is flushed, and the corresponding 
IN_PKT_RDY bit is cleared 


recs —ifea ft - | - | - 
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END POINT IN CONTROL STATUS REGISTER (IN_CSR1_REG/IN_CSR2_REG) (Continued) 


IN_PKT_RDY [0] R/SET | CLEAR | Set by the MCU after writing a packet of data 
into the FIFO. 
The USB clears this bit once the packet has 
been successfully sent to the host. 
An interrupt is generated when the USB clears 
this bit, so the MCU can load the next packet. 
While this bit is set, the MCU will not be able 
to write to the FIFO. 
If the MCU sets SEND STALL bit, this bit 
cannot be set. 


IN_CSR2_REG 0x52000188(L) R/W IN END POINT control status register2 0x20 
0x5200018B(B) (byte) 


AUTO_SET [7] R/W If set, whenever the MCU writes MAXP data, 
IN_PKT_RDY will automatically be set by the 
core without any intervention from MCU. 

If the MCU writes less than MAXP data, 
IN_PKT_RDY bit has to be set by the MCU. 

ISO R/W Used only for endpoints whose transfer type is 

programmable. 
1: Reserved 
0: Configures endpoint to Bulk mode 

MODE_IN [5] R/W Used only for endpoints whose direction is 1 

programmable. 
1: Configures Endpoint Direction as IN 
0: Configures Endpoint Direction as OUT 

IN_-DMA_INT_EN [4] R/W Determine whether the interrupt should be 
issued or not, when the IN_PKT_RDY 
condition happens. This is only useful for DMA 
mode. 

0 = Interrupt enable, 1 = Interrupt Disable 


eves [eat - | - i) - 
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END POINT OUT CONTROL STATUS REGISTER (OUT_CSR1_REG/OUT_CSR2_REG) 


OUT_CSR1_REG 0x52000190(L) R/W End Point out control status register1 0x00 
0x52000193(B) (byte) 


CLR_DATA_ [7] R/W CLEAR | When the MCU writes a 1 to this bit, the data 
TOGGLE toggle sequence bit is reset to DATAO. 


SENT_STALL R/ SET Set by the USB when an OUT token is ended 
CLEAR with a STALL handshake. The USB issues a 
stall handshake to the host if it sends more 
than MAXP data for the OUT TOKEN. 


SEND_STALL [5] R/W 0: The MCU clears this bit to end the STALL 
condition handshake, IN PKT RDY is cleared. 
1: The MCU issues a STALL handshake to 
the USB. The MCU clears this bit to end 
the STALL condition handshake, IN PKT RDY 
is cleared. 

FIFO_FLUSH [4] R/W CLEAR | The MCU writes a 1 to flush the FIFO. 
This bit can be set only when OUT_PKT_RDY 
(DO) is set. The packet due to be unloaded by 
the MCU will be flushed. 


fresnea jest - | - | - SS 


OUT_PKT_RDY R/ SET Set by the USB after it has loaded a packet of 
CLEAR data into the FIFO. Once the MCU reads the 
packet from FIFO, this bit should be cleared 
by MCU (write a "0"). 
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END POINT OUT CONTROL STATUS REGISTER (OUT_CSR1_REG/OUT_CSR2_REG) (Continued) 


OUT_CSR2_REG 0x52000194(L) R/W End Point out control status register2 0x00 
0x52000197(B) (byte) 


AUTO_CLR If the MCU is set, whenever the MCU reads 
data from the OUT FIFO, OUT_PKT_RDY will 
automatically be cleared by the logic without 
any intervention from the MCU. 


Determine endpoint transfer type. 
0: Configures endpoint to Bulk mode. 
1: Reserved 


OUT_DMA_INT_ Determine whether the interrupt should be 
MASK issued or not. 
OUT_PKT_RDY condition happens. This is 
only useful for DMA mode 
0 = Interrupt Enable 1 = Interrupt Disable 
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END POINT FIFO REGISTER (EPN_FIFO_REG) 


The EPn_FIFO_REG enables the MCU to access to the EPn FIFO. 


EPO _FIFO 0x520001CO(L) R/W End PointO FIFO register 0: 
0x520001C3 (B) byte 


ul 


i 


cL 


( 
EP1_FIFO 0x520001C4 R/W End Point1 FIFO register 
0x520001C7 (byte 
( 


Br|w 


) 
) 
EP2_ FIFO 0x520001C8 R/W End Point2 FIFO register 
0x520001CB byte) 
EP3 FIFO 0x520001CC R/W End Point3 FIFO register 
0x520001CF (byte) 
EP4 FIFO 0x520001D0 R/W End Point4 FIFO register 0 
0x520001D3 (byte) 


FIFO_DATA [7:0] FIFO data value 


H) 
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MAX PACKET REGISTER (MAXP_REG) 


MAXP_REG 0x52000180(L) R/W End Point MAX packet register 0x01 
0x52000183(B) (byte) 


MAXP [3:0] R/W 0000: Reserved 
0001: MAXP = 8 Byte0010: MAXP = 16 Byte 
0100: MAXP = 32 Byte1000: MAXP = 64 Byte 
For EPO, MAXP=8 is recommended. 
For EP1~4, MAXP=32 or MAXP=64 is 
recommended. And, if MAXP=82, the dual 
packet mode will be enabled automatically. 
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END POINT OUT WRITE COUNT REGISTER (OUT_FIFO_CNT1_REG/OUT_FIFO_CNT2_REG) 


These registers maintain the number of bytes in the packet as the number is unloaded by the MCU. 


OUT_FIFO_CNT1_ 0x52000198(L et Point out write count register1 0x00 
REG 0x5200019B(B nee 


OUT_CNT_LOW 70) | R | W__ [Lower byte of write count 


OUT_FIFO_CNT2_REG 0x5200019C(L) R End Point out write count register2 0x00 
0x520001 9F(B) (byte) 


OUT_CNT_HIGH [7:0] W Higher byte of write count. The 
OUT_CNT_HIGH may be always 0 
normally. 
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DMA INTERFACE CONTROL REGISTER (EPN_DMA_CON) 


EP1_ DMA _CON 0x52000200(L) R/W EP1 DMA interface control register 0x00 
0x52000203(B) (byte) 

EP2 DMA_CON 0x52000218(L) R/W EP2 DMA interface control register 0x00 
0x5200021 B(B) (byte) 

EP3_DMA_CON 0x52000240(L) R/W EP3 DMA interface control register 0x00 
0x52000243(B) (byte) 

EP4 DMA_CON 0x52000258(L) R/W EP4 DMA interface control register 0x00 
0x5200025B(B) (byte) 


IN_RUN_OB [7] R/W W Read) IN_DMA_Run Observation 
0: DMA is stopped 1:DMA is running 
Write) Ignore EPn_DMA_TTC_nh register 
0: DMA requests will be stopped if 
EPn_DMA_TTC_n reaches 0. 
1: DMA requests will be continued although 
EPn_DMA_TTC_n reaches 0. 


STATE 6:4) | R | W__ | DMA State Monitoring mn ae 


DEMAND_MODE [3] R/W DMA Demand mode enable bit 
0: Demand mode disable 
1: Demand mode enable 
OUT_RUN_OB/ [2] R/W R/W Functionally separated into write and read 
OUT_DMA_RUN operation. 
Write operation: "0" = Stop "1" = Run 
Read operation: OUT DMA Run Observation 


IN_DMA_RUN [1] R/W Start DMA operation. 
0 = Stop 


DMA_MODE_EN R/W R/ Set DMA mode.If the IN. RUN_OB has been 
CLEAR | wrtten as 0 and EPn_DMA_TTC_n reaches 0, 
DMA_MODE_EN bit will be cleared by USB. 
0 = Interrupt mode 1 = DMA mode 


a 
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DMA UNIT COUNTER REGISTER (EPN_DMA_UNIT) 


This register is valid in Demand mode. In other modes, this register value must be set to "0x01" 


EP1_DMA_UNIT 0x52000204(L) R/W EP1 DMA transfer unit counter base register 0x00 
0x52000207 (byte) 

EP2 DMA_UNIT 0x5200021C R/W EP2 DMA transfer unit counter base register 0x00 
0x5200021F (byte) 

EP3 DMA_UNIT 0x52000244 R/W EP3 DMA transfer unit counter base register 0x00 
0x52000247 (byte) 


CIBOIBO Be 


—=~ ~ 
Ww 
Se | ee 


EP4 DMA_UNIT 0x5200025C R/W EP4 DMA transfer unit counter base register 0x00 
0x5200025F (byte) 


EPn_UNITCNT | [7:0] | R/W | R___ [EP DMA transfer unit counter value 
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DMA FIFO COUNTER REGISTER (EPN_DMA_FIFO) 


This register has values in byte size in FIFO to be transferred by DMA. In case of OUT_DMA_RUN enabled, the 
value in OUT FIFO Write Count Register1 will be loaded in this register automatically. In case of IN DMA mode, the 
MCU should set proper value by software. 


EP1_ DMA _FIFO 0x52000208 
0x5200020B 

EP2 DMA _FIFO 0x52000220 
0x52000223 


Cis 


) 


R/W EP1 DMA transfer FIFO counter base register 0x00 
) | (byte) 
R/W EP2 DMA transfer FIFO counter base register 0x00 
(byte) 
EP3 DMA_FIFO 0x52000248 R/W EP3 DMA transfer FIFO counter base register 0x00 
0x5200024B(B) (byte) 
EP4 DMA FIFO 0x52000260(L) R/W EP4 DMA transfer FIFO counter base register 0x00 
0x52000263(B) (byte) 


EPn_FIFO.CNT | [7:0] | R/W | R__ [EP DMA transfer FIFO counter value 


Ber 


) 


BEDE 
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DMA TOTAL TRANSFER COUNTER REGISTER (EPN_DMA_TTC_L, M, H) 


This register should have total number of bytes to be transferred using DMA (total 20-bit counter). 


EP1_DMA_TTC_L 0x5200020C R/W EP1 DMA total transfer counter(lower byte) 0x00 
0x5200020F (byte) 

EP1_DMA_TTC_M 0x52000210 R/W EP1 DMA total transfer counter(middle byte) 0x00 
0x52000213 (byte) 

EP1_DMA_TTC_H 0x52000214 R/W EP1 DMA total transfer counter(higher byte) 0x00 
0x52000217 (byte) 

EP2_DMA_TTC_L 0x52000224 R/W EP2 DMA total transfer counter(lower byte) 0x00 
0x52000227 (byte) 

EP2 DMA_TTC_M 0x52000228 R/W EP2 DMA total transfer counter(middle byte) 0x00 
0x5200022B (byte) 

EP2_ DMA_TTC_H 0x5200022C R/W EP2 DMA total transfer counter(higher byte) 0x00 
0x5200022F (byte) 

EP3_DMA_TTC_L 0x5200024C R/W EP3 DMA total transfer counter(lower byte) 0x00 
0x5200024F (byte) 


BE\IGCL 


DFIBC/DCI/or 


aa oo. CO 
Dr 
eo ee! | | 
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EP3_DMA_TTC_M 0x52000250 R/W EP3 DMA total transfer counter(middle byte) 0x00 
0x52000253 (byte) 

EP3_DMA_TTC_H 0x52000254 R/W EP3 DMA total transfer counter(higher byte) 0x00 
0x52000257 (byte) 

EP4_ DMA_TTC_L 0x52000264 R/W EP4 DMA total transfer counter(lower byte) 0x00 
0x52000267 (byte) 

EP4_DMA_TTC_M 0x52000268 R/W EP4 DMA total transfer counter(middle byte) 0x00 
0x5200026B(B) (byte) 

EP4 DMA_TTC_H 0x5200026C(L) R/W EP4 DMA total transfer counter(higher byte) 0x00 
0x5200026F (B) (byte) 


CIBE|BE BT lar 


Ci 


[pmatx | en | cu | USB | Description __—_—_—_| initial State | 
fePntrck =— of vay | RW [OR DMA total transfer count value (lower byte) 
fePnticm = fiz} | RW [| RL DMA total transfer count value (middle byte) 
fePnttcH =—s | 30a) | RW [| RC DMA total transfer count value (higher byte) 
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INTERRUPT CONTROLLER 


OVERVIEW 


The interrupt controller in the S8C2410A receives the request from 56 interrupt sources. These interrupt sources are 
provided by internal peripherals such as the DMA controller, the UART, IIC, and others. In these interrupt sources, 
the UARTn and EINTn interrupts are 'OR'ed to the interrupt controller. 


When receiving multiple interrupt requests from internal peripherals and external interrupt request pins, the interrupt 
controller requests FIQ or IRQ interrupt of the ARM920T core after the arbitration procedure. 


The arbitration procedure depends on the hardware priority logic and the result is written to the interrupt pending 
register, which helps users notify which interrupt is generated out of various interrupt sources. 


ae Seat —» SUBSRCPND SUBMASK SRCPND EN 


Request sources 
(without sub -register) 


Figure 14-1. Interrupt Process Diagram 
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INTERRUPT CONTROLLER OPERATION 


F-bit and I-bit of Program Status Register (PSR) 


If the F-bit of PSR in ARM920T CPU is set to 1, the CPU does not accept the Fast Interrupt Request (FIQ) from the 
interrupt controller. Likewise, If I-bit of the PSR is set to 1, the CPU does not accept the Interrupt Request (IRQ) from 
the interrupt controller. So, the interrupt controller can receive interrupts by clearing F-bit or I-bit of the PSR to 0 and 
setting the corresponding bit of INTMSK to 0. 


Interrupt Mode 


The ARM920T has two types of Interrupt mode: FIQ or IRQ. All the interrupt sources determine which mode is used 
at interrupt request. 


Interrupt Pending Register 


The S3C2410A has two interrupt pending resisters: source pending register (SRCPND) and interrupt pending register 
(INTPND). These pending registers indicate whether or not an interrupt request is pending. When the interrupt 
sources request interrupt service, the corresponding bits of SRCPND register are set to 1, and at the same time, 
only one bit of the INTPND register is set to 1 automatically after arbitration procedure. If interrupts are masked, the 
corresponding bits of the SRCPND register are set to 1. This does not cause the bit of INTPND register changed. 
When a pending bit of the INTPND register is set, the interrupt service routine starts whenever the I-flag or F-flag is 
cleared to 0. The SRCPND and INTPND registers can be read and written, so the service routine must clear the 
pending condition by writing a 1 to the corresponding bit in the SRCPND register first and then clear the pending 
condition in the INTPND registers by using the same method. 


Interrupt Mask Register 


This register indicates that an interrupt has been disabled if the corresponding mask bit is set to 1. If an interrupt 
mask bit of INTMSK is 0, the interrupt will be serviced normally. If the corresponding mask bit is 1 and the interrupt is 
generated, the source pending bit will be set. 
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INTERRUPT SOURCES 


The interrupt controller supports 56 interrupt sources as shown in the table below. 


f 
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INTERRUPT PRIORITY GENERATING BLOCK 


The priority logic for 32 interrupt requests is composed of seven rotation based arbiters: six first-level arbiters and one 
second-level arbiter as shown in Figure 14-2 below. 


<— REQ1/EINTO 

<¢— REQ2/EINT1 
ARBITERO | 4 REQ3/EINT2 

<— REQ4/EINT3 

ARBITERG 

<— REQO/EINT4 7 

<— REQI/EINTS 23 
ARBITER <¢— REQ2/reserved 

<— REQS/INT_WDT 

<— REQO/INT_TIMERO 

<= REQOINT-TIMER? 

<_ = 
ARBITER2 = | 4 REQ3/INT_TIMER3 

<< REQ4/INT_TIMER4 

<— REQS/INT_UART2 


ARM IRQ 


<— REQO/INT_LCD 

+ REQ2INT-DMAt 

>= a 
ARBITERS | 4— REQ3/INT_DMA2 

— REQ4/INT-DMA3 

<— REQS/INT_SDI 


<— REQO/INT SPIO 
<= REQUINT-UART! 
<+_ reserve 
ARBITER4 =| 4 REOS/INT _USBD 
<_ REQ4/INT-USBH 
— REQS/INT_IIC 
4— REQI/INT_UARTO 
ARBITERS 
“4 REQ4/INT-ADC 


Figure 14-2. Priority Generating Block 
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INTERRUPT PRIORITY 


Each arbiter can handle six interrupt requests based on the one bit arbiter mode control (ARB_MODE) and two bits 
of selection control signals (ARB_SEL) as follows: 

— If ARB_SEL bits are 00b, the priority order is REQO, REQ1, REQ2, REQ3, REQ4, and REQ5. 

— lf ARB_SEL bits are 01b, the priority order is REQO, REQ2, REQ3, REQ4, REQ1, and REQS. 

— If ARB_SEL bits are 10b, the priority order is REQO, REQ3, REQ4, REQ1, REQ2, and REQS. 

— lf ARB_SEL bits are 11b, the priority order is REQ0, REQ4, REQ1, REQ2, REQ3, and REQ5. 


Note that REQO of an arbiter always has the highest priority, and REQ5 has the lowest one. In addition, by changing 
the ARB_SEL bits, we can rotate the priority of REQ1 to REQ4. 


Here, if ARB_MODE bit is set to 0, ARB_SEL bits are not automatically changed, making the arbiter to operate in 
the fixed priority mode (note that even in this mode, we can reconfigure the priority by manually changing the 
ARB_SEL bits). On the other hand, if ARB_MODE bit is 1, ARB_SEL bits are changed in rotation fashion, e.g., if 
REQ1 is serviced, ARB_SEL bits are changed to 01b automatically so as to put REQ1 into the lowest priority. The 
detailed rules of ARB_SEL change are as follows: 

— If REQO or REQS is serviced, ARB_SEL bits are not changed at all. 

— If REQ1 is serviced, ARB_SEL bits are changed to 01b. 

— If REQ2 is serviced, ARB_SEL bits are changed to 10b. 

— If REQ is serviced, ARB_SEL bits are changed to 11b. 


— If REQ4 is serviced, ARB_SEL bits are changed to 00b. 
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INTERRUPT CONTROLLER SPECIAL REGISTERS 


There are five control registers in the interrupt controller: source pending register, interrupt mode register, mask 
register, priority register, and interrupt pending register. 


All the interrupt requests from the interrupt sources are first registered in the source pending register. They are 
divided into two groups including Fast Interrupt Request (FIQ) and Interrupt Request (IRQ), based on the interrupt 
mode register. The arbitration procedure for multiple IRQs is based on the priority register. 


SOURCE PENDING (SRCPND) REGISTER 


The SRCPND register is composed of 32 bits each of which is related to an interrupt source. Each bit is set to 1 if 
the corresponding interrupt source generates the interrupt request and waits for the interrupt to be serviced. 
Accordingly, this register indicates which interrupt source is waiting for the request to be serviced. Note that each bit 
of the SRCPND register is automatically set by the interrupt sources regardless of the masking bits in the INTMASK 
register. In addition, the SRCPND register is not affected by the priority logic of interrupt controller. 


In the interrupt service routine for a specific interrupt source, the corresponding bit of the SRCPND register has to be 
cleared to get the interrupt request from the same source correctly. If you return from the ISR without clearing the bit, 
the interrupt controller operates as if another interrupt request came in from the same source. In other words, if a 
specific bit of the SRCPND register is set to 1, it is always considered as a valid interrupt request waiting to be 
serviced. 


The time to clear the corresponding bit depends on the user's requirement. If you want to receive another valid 
request from the same source, you should clear the corresponding bit first, and then enable the interrupt. 


You can clear a specific bit of the SRCPND register by writing a data to this register. It clears only the bit positions 
of the SRCPND corresponding to those set to one in the data. The bit positions corresponding to those that are set 
to 0 in the data remains as they are. 


SRCPND 0X4A000000 R/W Indicate the interrupt request status. 0x00000000 
0 = The interrupt has not been requested. 
1 = The interrupt source has asserted the interrupt 
request. 
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SOURCE PENDING (SRCPND) REGISTER (Continued) 


INTERRUPT CONTROLLER 


1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 


eq [Ntwed—SSC~iS 


INT_TIMER4 [14] 0 = Not requested, 
INT_TIMER3 [13] 
INT_TIMER2 [12] 
INT_TIMER1 [11] 0 = Not requested, 
INT_WDT | 0 = Not requested, 


0 = Not requested, 
0 = Not requested, 


1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 


Reseed |) Netw SSSCSC~C~—SSC 


1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 


EINT1 0 = Not requested, 1 = Requested 


EINTO | | 0 = Not requested, 
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1 = Requested 


INTERRUPT CONTROLLER S3C2410A 


INTERRUPT MODE (INTMOD) REGISTER 


This register is composed of 32 bits each of which is related to an interrupt source. If a specific bit is set to 1, the 
corresponding interrupt is processed in the FIQ (fast interrupt) mode. Otherwise, it is processed in the IRQ mode 
(normal interrupt). 


Note that only one interrupt source can be serviced in the FIQ mode in the interrupt controller (you should use the 
FIQ mode only for the urgent interrupt). Thus, only one bit of INTMOD can be set to 1. 


ai 


INTMOD 0X4A000004 R/W Interrupt mode regiseter. 0x00000000 
0 = IRQ mode 1 = FIQ mode 


NOTE: If an interrupt mode is set to FIQ mode in the INTMOD register, FIQ interrupt will not affect both INTPND and 
INTOFFSET registers. In this case, the two registers are valid only for IRQ mode interrupt source. 
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INTERRUPT CONTROLLER 


1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 


2 


INT_UART2 [15] 0 = IRQ, 


INT_TIMER4 [14] 0 =IRQ, 
INT_TIMER3 [13] 0 = IRQ, 


INT_TIMER2 [12] 0=IRQ, 1=FIQ | oo 


INT_TIMER1 [11] 0 = IRQ, 


1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 


1=FIQ 


INT_TIMERO [10] 0=IRQ, 1=FIQ | oo 


INT_WDT | 0 = IRQ, 


INT_TICK | fs}: JO = IRQ, 
nBATT_FLT 0 = IRQ, 


1=FIQ 
1=FIQ 
1=FIQ 


[Reseed |) Netw SSCSCSC~“~S~“~Ss~CS 


1=FIQ 
1=FIQ 
1=FIQ 
1=FIQ 


EINT1 1] 0=IRQ, 1=FIQ 
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1=FIQ 
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INTERRUPT MASK (INTMSK) REGISTER 


This register also has 32 bits each of which is related to an interrupt source. If a specific bit is set to 1, the CPU 
does not service the interrupt request from the corresponding interrupt source (note that even in such a case, the 
corresponding bit of SRCPND register is set to 1). If the mask bit is 0, the interrupt request can be serviced. 


INTMSK 0X4A000008 R/W Determine which interrupt source is masked. The OxFFFFFFFF 
masked interrupt source will not be serviced. 
0 = Interrupt service is available. 
1 = Interrupt service is masked. 
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eS ee a CT 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 


0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 


INT_TIMER4 [14] 0 = Service available, 1 = Masked 
INT_TIMER3 [13] 0 = Service available, 1 = Masked 


INT_TIMER2 [12] 0 = Service available, 1 = Masked —— 


INT_TIMER1 [11] 0 = Service available, 1 = Masked 


INT_TIMERO 0 = Service available, 1 = Masked SS 
INT_WDT | 0 = Service available, 1 = Masked 

INTTICK TC 0 = Service available, 1 = Masked 

0 = Service available, 1 = Masked 


0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
feInt2 Tc 0 = Service available, 1 = Masked 
enti] _—*[0= Service availabe, 1=Masked | St 
i a a er 0 = Service SaieDE: 1 = Masked 
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PRIORITY REGISTER (PRIORITY) 


PRIORITY —_| 0x4A00000C IRQ priority control register 


ARB_SEL6 [20:19] | Arbiter 6 group priority order set 

00 = REQ 0-1-2-3-4-5 01 = REQ 0-2-3-4-1-5 

10 = REQ 0-3-4-1-2-5 = 11 = REQ 0-4-1-2-3-5 
ARB_SEL5 [18:17] | Arbiter 5 group priority order set 

00 = REQ 1-2-3-4 01 = REQ 2-3-4-1 

10 = REQ 3-4-1-2 11 = REQ 4-1-2-3 
ARB_SEL4 [16:15] | Arbiter 4 group priority order set 

00 = REQ 0-1-2-3-4-5 01 = REQ 0-2-3-4-1-5 

10 = REQ 0-3-4-1-2-5 = 11 = REQ 0-4-1-2-3-5 
ARB_SEL3 [14:13] | Arbiter 3 group priority order set 

00 = REQ 0-1-2-3-4-5 01 = REQ 0-2-3-4-1-5 

10 = REQ 0-3-4-1-2-5 = 11 = REQ 0-4-1-2-3-5 
ARB_SEL2 [12:11] | Arbiter 2 group priority order set 

00 = REQ 0-1-2-3-4-5 01 = REQ 0-2-3-4-1-5 

10 = REQ 0-3-4-1-2-5 = 11 = REQ 0-4-1-2-3-5 
ARB_SEL1 [10:9] | Arbiter 1 group priority order set 

00 = REQ 0-1-2-3-4-5 01 = REQ 0-2-3-4-1-5 

10 = REQ 0-3-4-1-2-5 = 11 = REQ 0-4-1-2-3-5 
ARB_SELO [8:7] Arbiter 0 group priority order set 

00 = REQ 1-2-3-4 01 = REQ 2-3-4-1 

10 = REQ 3-4-1-2 11 = REQ 4-1-2-3 
ARB_MODE6 Arbiter 6 group priority rotate enable 

0 = Priority does not rotate 

1 = Priority rotate enable 
ARB_MODE5 [5 Arbiter 5 group priority rotate enable 

0 = Priority does not rotate 

1 = Priority rotate enable 
ARB_MODE4 [4 Arbiter 4 group priority rotate enable 

0 = Priority does not rotate 

1 = Priority rotate enable 
ARB_MODE3 [3 Arbiter 3 group priority rotate enable 

0 = Priority does not rotate 

1 = Priority rotate enable 
ARB_MODE2 [2 Arbiter 2 group priority rotate enable 

0 = Priority does not rotate 

1 = Priority rotate enable 


] 
] 
] 
] 
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PRIORITY REGISTER (PRIORITY) (Continued) 


ARB_MODE1 Arbiter 1 group priority rotate enable 
0 = Priority does not rotate 
1 = Priority rotate enable 


ARB_MODEO Arbiter 0 group priority rotate enable 
0 = Priority does not rotate 
1 = Priority rotate enable 
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INTERRUPT PENDING (INTPND) REGISTER 


Each of the 32 bits in the interrupt pending register shows whether the corresponding interrupt request, which is 
unmasked and waits for the interrupt to be serviced, has the highest priority . Since the INTPND register is located 
after the priority logic, only one bit can be set to 1, and that interrupt request generates IRQ to CPU. In interrupt 
service routine for IRQ, you can read this register to determine which interrupt source is serviced among the 32 
sources. 


Like the SRCPND register, this register has to be cleared in the interrupt service routine after clearing the SRCPND 
register. We can clear a specific bit of the INTPND register by writing a data to this register. It clears only the bit 
positions of the INTPND register corresponding to those set to one in the data. The bit positions corresponding to 
those that are set to 0 in the data remains as they are. 


INTPND 0X4A000010 R/W Indicate the interrupt request status. 0x00000000 
0 = The interrupt has not been requested. 
1 = The interrupt source has asserted the interrupt 
request. 


NOTES: 

1. Ifthe FIQ mode interrupt occurs, the corresponding bit of INTPND will not be turned on as the INTPND register is 
available only for IRQ mode interrupt. 

2. Cautions in clearing the INTPND register. 
The INTPND register is cleared to "0" by writing "1". If the INTPND bit, which has "1", is cleared by "0", the INTPND 
register & INTOFFSET register may have unexpected value in some case. 
So, you never write "0" on the INTPND bit having "1". The convenient method to clear the INTPND register is writing the 
INTPND register value on the INTPND register. (In even our example code, this guide hasn't been applied yet.) 
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1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 


eq [Ntwed—SSC~iS 


INT_TIMER4 [14] 0 = Not requested, 
INT_TIMER3 [13] 
INT_TIMER2 [12] 
INT_TIMER1 [11] 0 = Not requested, 
INT_WDT | 0 = Not requested, 


0 = Not requested, 
0 = Not requested, 


1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 


Reseed |) Netw SSSCSC~C~—SSC 


1 = Requested 
1 = Requested 
1 = Requested 
1 = Requested 


EINT1 0 = Not requested, 1 = Requested 


EINTO | | 0 = Not requested, 
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1 = Requested 
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INTERRUPT OFFSET (INTOFFSET) REGISTER 


The value in the interrupt offset register shows which interrupt request of IRQ mode is in the INTPND register. 
This bit can be cleared automatically by clearing SRCPND and INTPND. 


INTOFFSET | 0x4A000014 | _R__| Indicate the IRQ interrupt request source 0x00000000 


INT_SPI1 
INT_UARTO 
INT_IIC 
INT_USBH 
INT_USBD 


INT_TIMER1 
INT_TIMERO 
INT_WDT 


INT_UART1 
INT_SPIO 
INT_SDI 
INT_DMA3 
INT_DMA2 


NOTE: FIQ mode interrupt does not affect the INTOFFSET register as the register is available only for IRQ mode interrupt. 


3 
3 
2 
2 
2 
2 
2 
2 
2 
2 
2 
2 


{ 
0 
9 
8 
7 
6 
5 
4 
3 
2 
1 
0 

19 

18 

17 

16 
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SUB SOURCE PENDING (SUBSRCPND) REGISTER 


You can clear a specific bit of the SUBSRCPND register by writing a data to this register. It clears only the bit 
positions of the SUBSRCPND register corresponding to those set to one in the data. The bit positions corresponding 
to those that are set to 0 in the data remains as they are. 


SUBSRCPND | 0X4A000018 R/W Indicate the interrupt request status. 0x00000000 
0 = The interrupt has not been requested. 
1 = The interrupt source has asserted the interrupt 
request. 


0 = Not requested, 1 = Requested | oo 

INT_TC | gl | 0 = Not requested, 1 = Requested | oo 
FINTERR2 | [8] | 0 = Not requested, 1 = Requested fo 
0 = Not requested, 1 = Requested | oo 
FINTRXD2 =| [6] 0 = Not requested, 1 = Requested | oo 
0 = Not requested, 1 = Requested | oo 
0 = Not requested, 1 = Requested | oo 
0 = Not requested, 1 = Requested | oo 
0 = Not requested, 1 = Requested | oo 
0 = Not requested, 1 = Requested | oo 
FINTRXDO =| of] 0 = Not requested, 1 = Requested | oo 
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INTERRUPT SUB MASK (INTSUBMSK) REGISTER 


This register has 11 bits each of which is related to an interrupt source. If a specific bit is set to 1, the interrupt 
request from the corresponding interrupt source is not serviced by the CPU (note that even in such a case, the 
corresponding bit of the SUBSRCPND register is set to 1). If the mask bit is 0, the interrupt request can be serviced. 


INTSUBMSK 0X4A00001C R/W Determine which interrupt source is masked. 
The masked interrupt source will not be serviced. 
0 = Interrupt service is available. 
1 = Interrupt service is masked. 


0 = Service available, 1 = Masked 

INT_TC | gl | 0 = Service available, 1 = Masked 
FINTERR2 | [8] | 0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
FINTRXD2 =| [6] 0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
0 = Service available, 1 = Masked 
FINTRXDO =| fl 0 = Service available, 1 = Masked 
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LCD CONTROLLER 


OVERVIEW 


The LCD controller in the S3C2410A consists of the logic for transferring LCD image data from a video buffer located 
in system memory to an external LCD driver. 


The LCD controller supports monochrome, 2-bit per pixel (4-level gray scale) or 4-bit per pixel (16-level gray scale) 
mode on a monochrome LCD, using a time-based dithering algorithm and Frame Rate Control (FRC) method and it 
can be interfaced with a color LCD panel at 8-bit per pixel (256-level color) and 12-bit per pixel (4096-level color) for 
interfacing with STN LCD. 

It can support 1-bit per pixel, 2-bit per pixel, 4-bit per pixel, and 8-bit per pixel for interfacing with the palettized TFT 
color LCD panel, and 16-bit per pixel and 24-bit per pixel for non-palettized true-color display. 


The LCD controller can be programmed to support different requirements on the screen related to the number of 
horizontal and vertical pixels, data line width for the data interface, interface timing, and refresh rate. 


FEATURES 


STN LCD displays: 

— Supports 3 types of LCD panels: 4-bit dual scan, 4-bit single scan, and 8-bit single scan display type 
— Supports the monochrome, 4 gray levels, and 16 gray levels 

— Supports 256 colors and 4096 colors for color STN LCD panel 


— Supports multiple screen size 
Typical actual screen size: 640x480, 320x240, 160x160, and others 
Maximum virtual screen size is 4Mbytes. 
Maximum virtual screen size in 256 color mode: 4096x1024, 2048x2048, 1024x4096, and others 


TFT LCD displays: 

— Supports 1, 2, 4 or 8-bpp (bit per pixel) palettized color displays for TFT 
— Supports 16-bpp non-palettized true-color displays for color TFT 

— Supports 24-bpp non-palettized true-color displays for color TFT 

— Supports maximum 16M color TFT at 24-bit per pixel mode 


— Supports multiple screen size 
Typical actual screen size: 640x480, 320x240, 160x160, and others 
Maximum virtual screen size is 4Mbytes. 
Maximum virtual screen size in 64K color mode: 2048x1024 and others 
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COMMON FEATURES 


The LCD controller has a dedicated DMA that supports to fetch the image data from video buffer located in system 
memory. Its features also include: 

— Dedicated interrupt functions (INT_FrSyn and INT_FiCnt) 

— The system memory is used as the display memory. 

— Supports Multiple Virtual Display Screen (Supports Hardware Horizontal/Vertical Scrolling) 

— Programmable timing control for different display panels 

— Supports little and big-endian byte ordering, as well as WinCE data formats 


— Supports SEC TFT LCD panel (SAMSUNG 3.5” Portrait/256K Color/Reflective a-Si TFT LCD) 
LTS350Q1-PD1: TFT LCD panel with touch panel and front light unit 
LTS350Q1-PD2: TFT LCD panel only 


NOTE 


WinCE doesn't support the 12-bit packed data format. 
Please check if WinCE can support the 12-bit color-mode. 


EXTERNAL INTERFACE SIGNAL 


VFRAME/VSYNC/STV_ : Frame synchronous signal (STN)/vertical synchronous signal (TFT)/SEC TFT signal 
VLINE/HSYNC/CPV : Line synchronous pulse signal (STN)/horizontal sync signal (TFT)/SEC TFT signal 


VCLK/LCD_HCLK : Pixel clock signal (STN/TFT)/SEC TFT signal 

VD[23:0] : LCD pixel data output ports (STN/TFT/SEC TFT) 

VM/VDEN/TP : AC bias signal for the LCD driver (STN)/data enable signal (TFT)/SEC TFT signal 
LEND/STH : Line end signal (TFT)/SEC TFT signal 

LCD_PWREN : LCD panel power enable control signal 

LCDVFO : SEC TFT Signal OE 

LCDVF1 : SEC TFT Signal REV 

LCDVF2 : SEC TFT Signal REVB 


The 33 output ports in total includes 24 data bits and 9 control bits 


15-2 ELECTRONICS 


$3C2410A LCD CONTROLLER 


BLOCK DIAGRAM 


System Bus 
VCLK /LCD_HCLK 
TIMEGEN VLINE / HSYNC / CPV 
REGBANK VFRAME / VSYNC / STV 
VIDEO VM /VDEN/ TP 
MUX : 
LPC3600 LCDVFO 


LCDVF 1 


LCDVF2 
LCDCDMA 
coc VIDPRCS VD[23:0] 


LPC3600 is a timing control logic unit for LTS350Q1-PD1 or LTS350Q1-PD2. 


Figure 15-1. LCD Controller Block Diagram 


The S3C2410A LCD controller is used to transfer the video data and to generate the necessary control signals, such 
as VFRAME, VLINE, VCLK, VM, and so on. In addition to the control signals, the S8C2410A has the data ports for 
video data, which are VD[23:0] as shown in Figure 15-1. The LCD controller consists of a REGBANK, LCDCDMA, 
VIDPRCS, TIMEGEN, and LPC3600 (See the Figure 15-1 LCD Controller Block Diagram). The REGBANK has 17 
programmable register sets and 256x16 palette memory which are used to configure the LCD controller. The 
LCDCDMA is a dedicated DMA, which can transfer the video data in frame memory to LCD driver automatically. By 
using this special DMA, the video data can be displayed on the screen without CPU intervention. The VIDPRCS 
receives the video data from the LCDCDMA and sends the video data through the VD[23:0] data ports to the LCD 
driver after changing them into a suitable data format, for example 4/8-bit single scan or 4-bit dual scan display 
mode. The TIMEGEN consists of programmable logic to support the variable requirements of interface timing and 
rates commonly found in different LCD drivers. The TIMEGEN block generates VFRAME, VLINE, VCLK, VM, and so 
on. 


The description of data flow is as follows: 


FIFO memory is present in the LCDCDMA. When FIFO is empty or partially empty, the LCDCDMA requests data 
fetching from the frame memory based on the burst memory transfer mode (consecutive memory fetching of 4 words 
(16 bytes) per one burst request without allowing the bus mastership to another bus master during the bus transfer). 
When the transfer request is accepted by bus arbitrator in the memory controller, there will be four successive word 
data transfers from system memory to internal FIFO. The total size of FIFO is 28 words, which consists of 12 words 
FIFOL and 16 words FIFOH, respectively. The S3C2410A has two FIFOs to support the dual scan display mode. In 
case of single scan mode, one of the FIFOs (FIFOH) can only be used. 
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STN LCD CONTROLLER OPERATION 


TIMING GENERATOR (TIMEGEN) 


The TIMEGEN generates the control signals for the LCD driver, such as VFRAME, VLINE, VCLK, and VM. These 
control signals are closely related to the configuration on the LCDCON1/2/3/4/5 registers in the REGBANK. Based 
on these programmable configurations on the LCD control registers in the REGBANK, the TIMEGEN can generate 
the programmable control signals suitable to support many different types of LCD drivers. 


The VFRAME pulse is asserted for the duration of the entire first line at a frequency of once per frame. The VFRAME 
signal is asserted to bring the LCD's line pointer to the top of the display to start over. 


The VM signal helps the LCD driver alternate the polarity of the row and column voltages, which are used to turn the 
pixel on and off. The toggling rate of VM signals depends on the MMODE bit of the LCDCON1 register and MVAL 
field of the LCDCON4 register. If the MMODE bit is 0, the VM signal is configured to toggle on every frame. If the 
MMODE bit is 1, the VM signal is configured to toggle on the every event of the elapse of the specified number of 
VLINE by the MVAL[7:0] value. Figure 15-4 shows an example for MMODE = 0 and for MMODE = 1 with the value of 
MVAL[7:0] = 0x2. When MMODE = 1, the VM rate is related to MVAL[7:0], as shown below: 


VM Rate = VLINE Rate / ( 2 * MVAL) 


The VFRAME and VLINE pulse generation relies on the configurations of the HOZVAL field and the LINEVAL field in 
the LCDCON2/3 register. Each field is related to the LCD size and display mode. In other words, the HOZVAL and 
LINEVAL can be determined by the size of the LCD panel and the display mode according to the following equation: 


HOZVAL = (Horizontal display size / Number of the valid VD data line)-1 
In color mode: Horizontal display size = 3 * Number of Horizontal Pixel 


In the 4-bit single scan display mode, the Number of valid VD data line should be 4. In case of 4-bit dual scan 
display, the Number of valid VD data line should also be 4 while in case of 8-bit single scan display mode, the 
Number of valid VD data line should be 8. 


LINEVAL = (Vertical display size) -1: In case of single scan display type 
LINEVAL = (Vertical display size / 2) -1: In case of dual scan display type 


The rate of VCLK signal depends on the configuration of the CLKVAL field in the LCDCON1 register. Table 15-1 
defines the relationship of VCLK and CLKVAL. The minimum value of CLKVAL is 2. 


VCLK(Hz)=HCLK/((CLKVAL x 2) 


The frame rate is the VFRAM signal frequency. The frame rate is closely related to the field of WLH[1:0](VLINE pulse 
width) WDLY[1:0] (the delay width of VCLK after VLINE pulse), HOZVAL, LINEBLANK, and LINEVAL in the 
LCDCON1/2/3/4 registers as well as VCLK and HCLK. Most LCD drivers need their own adequate frame rate. The 
frame rate is calculated as follows: 


frame_rate(Hz) = 1/[ { (1/VCLK) x (HOZVAL+1)+(1/HCLK) x (A+B+(LINEBLANK x 8) ) } x ( LINEVAL+1) ] 
A= ottewtry B= Xwoly) 
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Table 15-1. Relation Between VCLK and CLKVAL (STN, HCLK = 60 MHz) 


CLKVAL 60 MHz/X VCLK 


1023 60 MHz/2046 29.3 kHz 


VIDEO OPERATION 


The S3C2410A LCD controller supports 8-bit color mode (256 color mode), 12-bit color mode (4096 color mode), 4 
level gray scale mode, 16 level gray scale mode as well as the monochrome mode. For the gray or color mode, it is 
required to implement the shades of gray level or color according to time-based dithering algorithm and Frame Rate 
Control (FRC) method. The selection can be made following a programmable lockup table, which will be explained 
later. The monochrome mode bypasses these modules (FRC and lookup table) and basically serializes the data in 
FIFOH (and FIFOL if a dual scan display type is used) into 4-bit (or 8-bit if a 4-bit dual scan or 8-bit single scan 
display type is used) streams by shifting the video data to the LCD driver. 


The following sections describe the operation on the gray and color mode in terms of the lookup table and FRC. 


Lookup Table 


The S3C2410A can support the lookup table for various selection of color or gray level mapping, ensuring flexible 
operation for users. The lookup table is the palette which allows the selection on the level of color or gray (Selection 
on 4-gray levels among 16 gray levels in case of 4 gray mode, selection on 8 red levels among 16 levels, 8 green 
levels among 16 levels and 4 blue levels among 16 levels in case of 256 color mode). In other words, users can 
select 4 gray levels among 16 gray levels by using the lookup table in the 4 gray level mode. The gray levels cannot 
be selected in the 16 gray level mode; all 16 gray levels must be chosen among the possible 16 gray levels. In case 
of 256 color mode, 3 bits are allocated for red, 3 bits for green and 2 bits for blue. The 256 colors mean that the 
colors are formed from the combination of 8 red, 8 green and 4 blue levels (8x8x4 = 256). In the color mode, the 
lookup table can be used for suitable selections. Eight red levels can be selected among 16 possible red levels, 8 
green levels among 16 green levels, and 4 blue levels among 16 blue levels. In case of 4096 color mode, there is no 
selection as in the 256 color mode. 


Gray Mode Operation 


The S3C2410A LCD controller supports two gray modes: 2-bit per pixel gray (4 level gray scale) and 4-bit per pixel 
gray (16 level gray scale). The 2-bit per pixel gray mode uses a lookup table (BLUELUT), which allows selection on 4 
gray levels among 16 possible gray levels. The 2-bit per pixel gray lookup table uses the BULEVAL[15:0] in Blue 
Lookup Table (BLUELUT) register as same as blue lookup table in color mode. The gray level 0 will be denoted by 
BLUEVALJ[3:0] value. If BLUEVAL[3:0] is 9, level 0 will be represented by gray level 9 among 16 gray levels. If 
BLUEVALI3:0] is 15, level 0 will be represented by gray level 15 among 16 gray levels, and so on. Following the 
same method as above, level 1 will also be denoted by BLUEVAL[7:4], the level 2 by BLUEVAL[11:8], and the level 3 
by BLUEVAL[15:12]. These four groups among BLUEVAL[15:0] will represent level 0, level 1, level 2, and level 3. In 
16 gray levels, there is no selection as in the 16 gray levels. 
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256 Level Color Mode Operation 


The S3C2410A LCD controller can support an 8-bit per pixel 256 color display mode. The color display mode can 
generate 256 levels of color using the dithering algorithm and FRC. The 8-bit per pixel are encoded into 3-bits for red, 
3-bits for green, and 2-bits for blue. The color display mode uses separate lookup tables for red, green, and blue. 
Each lookup table uses the REDVAL[31:0] of REDLUT register, GREENVAL[31:0] of GREENLUT register, and 
BLUEVAL[15:0] of BLUELUT register as the programmable lookup table entries. 


Similar to the gray level display, 8 group or field of 4 bits in the REDLUR register, i.e., REDVAL[31 :28], 
REDLUT[27:24], REDLUT[23:20], REDLUT[19:16], REDLUT[15:12], REDLUT[11:8], REDLUT[7:4], and REDLUT[3:0], 
are assigned to each red level. The possible combination of 4 bits (each field) is 16, and each red level should be 
assigned to one level among possible 16 cases. In other words, the user can select the suitable red level by using 
this type of lookup table. For green color, the GREENVAL[31:0] of the GREENLUT register is assigned as the 
lookup table, as was done in the case of red color. Similarly, the BLUEVAL[15:0] of the BLUELUT register is also 
assigned as a lookup table. For blue color, 2 bits are allocated for 4 blue levels, different from the 8 red or green 
levels. 


4096 Level Color Mode Operation 


The S3C2410A LCD controller can support a 12-bit per pixel 4096 color display mode. The color display mode can 
generate 4096 levels of color using the dithering algorithm and FRC. The 12-bit per pixel are encoded into 4-bit for 
red, 4-bit for green, and 4-bit for blue. The 4096 color display mode does not use lookup tables. 
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DITHERING AND FRAME RATE CONTROL 


For STN LCD displays (except monochrome), video data must be processed by a dithering algorithm. The DITHFRC 
block has two functions, such as Time-based Dithering Algorithm for reducing flicker and Frame Rate Control (FRC) 
for displaying gray and color level on the STN panel. The main principle of gray and color level display on the STN 
panel based on FRC is described. For example, to display the third gray (3/16) level from a total of 16 levels, the 3 
times pixel should be on and 13 times pixel off. In other words, 3 frames should be selected among the 16 frames, of 
which 3 frames should have a pixel-on on a specific pixel while the remaining 13 frames should have a pixel-off on a 
specific pixel. These 16 frames should be displayed periodically. This is basic principle on how to display the gray 
level on the screen, so-called gray level display by FRC. The actual example is shown in Table 15-2. To represent 
the 14h gray level in the table, we should have a 6/7 duty cycle, which mean that there are 6 times pixel-on and one 
time pixel-off. The other cases for all gray levels are also shown in Table 15-2. 


In the STN LCD display, we should be reminded of one item, i.e., Flicker Noise due to the simultaneous pixel-on and 
-off on adjacent frames. For example, if all pixels on first frame are turned on and all pixels on next frame are turned 
off, the Flicker Noise will be maximized. To reduce the Flicker Noise on the screen, the average probability of pixel- 
on and -off between frames should be the same. In order to realize this, the Time-based Dithering Algorithm, which 
varies the pattern of adjacent pixels on every frame, should be used. This is explained in detail. For the 16 gray level, 
FRC should have the following relationship between gray level and FRC. The 15th gray level should always have pixel- 
on, and the 14th gray level should have 6 times pixel-on and one times pixel-off, and the 13'" gray level should have 4 
times pixel-on and one times pixel-off, ,,,,,,,, , and the 0!" gray level should always have pixel-off as shown in Table 
15-2. 


Table 15-2. Dither Duty Cycle Examples 


(eiay level number) _tseyieeinumbey level number) 
es ae ce ee Se (ne 
Pt 


a 
a 
Ca 
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Display Types 


The LCD controller supports 3 types of LCD drivers: 4-bit dual scan, 4-bit single scan, and 8-bit single scan display 
mode. Figure 15-2 shows these 3 different display types for monochrome displays, and Figure 15-3 show these 3 
different display types for color displays. 


4-bit Dual Scan Display Type 


A 4-bit dual scan display uses 8 parallel data lines to shift data to both the upper and lower halves of the display at 
the same time. The 4 bits of data in the 8 parallel data lines are shifted to the upper half and 4 bits of data is shifted 
to the lower half, as shown in Figure 15-2. The end of frame is reached when each half of the display has been 
shifted and transferred. The 8 pins (VD[7:0]) for the LCD output from the LCD controller can be directly connected to 
the LCD driver. 


4-bit Single Scan Display Type 


A 4-bit single scan display uses 4 parallel data lines to shift data to successive single horizontal lines of the display 
at a time, until the entire frame has been shifted and transferred. The 4 pins (VD[8:0]) for the LCD output from the 
LCD controller can be directly connected to the LCD driver, and the 4 pins (VD[7:4]) for the LCD output are not used. 


8-bit Single Scan Display Type 


An 8-bit single scan display uses 8 parallel data lines to shift data to successive single horizontal lines of the display 
at a time, until the entire frame has been shifted and transferred. The 8 pins (VD[7:0]) for the LCD output from the 
LCD controller can be directly connected to the LCD driver. 


256 Color Displays 


Color displays require 3 bits (Red, Green, and Blue) of image data per pixel, and so the number of horizontal shift 
registers for each horizontal line corresponds to three times the number of pixels of one horizontal line. resulting in a 
horizontal shift register of length 3 times the number of pixels per horizontal line This RGB is shifted to the LCD driver 
as consecutive bits via the parallel data lines. Figure 15-3 shows the RGB and order of the pixels in the parallel data 
lines for the 3 types of color displays. 


4096 Color Displays 


Color displays require 3 bits (Red, Green, and Blue) of image data per pixel, and so the number of horizontal shift 
registers for each horizontal line corresponds to three times the number of pixels of one horizontal line. This RGB is 
shifted to the LCD driver as consecutive bits via the parallel data lines. This RGB order is determined by the 
sequence of video data in video buffers. 
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MEMORY DATA FORMAT (STN, BSWP=0) 


Mono 4-bit Dual Scan Display: 
Video Buffer Memory: 


Address Data 
0000H A[31:0] 
0004H B[31:0] 


LCD Panel 


A[31] A[30] 


° L[31] L[30] 


1000H L[31:0] 
1004H M[31:0] 


Mono 4-bit Single Scan Display & 8-bit Single Scan Display: 


Video Buffer Memory: LCD Panel 


Address Data 

0000H A[31:0] 
0004H B[31:0] 
0008H C[31:0] 


A[31] A[30] A[29] 


ELEGTRONECS 15-9 


LCD CONTROLLER S3C2410A 


MEMORY DATA FORMAT ( STN, BSWP = 0 ) (Continued) 
In 4-level gray mode, 2 bits of video data correspond to 1 pixel. 
In 16-level gray mode, 4 bits of video data correspond to 1 pixel. 


In 256 level color mode, 8 bits (8 bits of red, 3 bits of green, and 2 bits of blue) of video data correspond to 1 pixel. 
The color data format in a byte is as follows: 


oni7s] | euraay | aura | 
[ret [Green [ae | 


In 4096 level color mode, 12 bits (4 bits of red, 4 bits of green, 4 bits of blue) of video data correspond to 1 pixel. The 
following table shows color data format in words: (Video data must reside at 3 word boundaries (8 pixel), as follows) 


RGB Order 


[bara | aa | ray | ean | rene | ea | a | a | ee 
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4-bit Dual Scan Display 


4-bit Single Scan Display 


8-bit Single Scan Display 


Figure 15-2. Monochrome Display Types (STN) 
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VD3 | VD2 | VD1 | VDO | VD3 | VD2 | VD1 | VDO 
R1 G1 B1 R2 | G2 | B2 R3 | G3 


1 Pixel 


VD7 | VD6 |} VD5 | VD4 | VD7 | VD6 | VD5 |} VD4 
R1 G1 B1 R2 | G2 | B2 R3 | G3 


4-bit Dual Scan Display 


VD3 | VD2 | VD1 | VDO | VD3 | VD2 | VD1 | VDO 
R1 G1 B1 R2 | G2 | B2 R3 | G3 


1 Pixel 


4-bit Single Scan Display 


VD7 | VD6 | VD5 | VD4 | VD3 | VD2 | VD1 | VDO 
R1 G1 Bi R2 | G2 | B2 R3 | G3 


1 Pixel 


8-bit Single Scan Display 


Figure 15-3. Color Display Types (STN) 
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Timing Requirements 


Image data should be transferred from the memory to the LCD driver using the VD[7:0] signal. VCLK signal is used 
to clock the data into the LCD driver's shift register. After each horizontal line of data has been shifted into the LCD 
driver's shift register, the VLINE signal is asserted to display the line on the panel. 


The VM signal provides an AC signal for the display. The LCD uses the signal to alternate the polarity of the row and 
column voltages, which are used to turn the pixels on and off, because the LCD plasma tends to deteriorate 
whenever subjected to a DC voltage. It can be configured to toggle on every frame or to toggle every programmable 
number of VLINE signals. 


Figure 15-4 shows the timing requirements for the LCD driver interface. 
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Full Frame Timing (MMODE = 0) 


INT_FrSyn es 


VM 


VLINE LINE1LINE2LINE3LINE4LINESLINE6| 


i} 
! 
Full Frame Timing (MMODE = 1, MVAL = 0x2) 


i} 
INT_FrSyn slow CC—“—~C™S™SCSCS CS; 
! \ 
VERAME 


VM 
VLINE 
LINECNT 


K LINEBLANK y 


VFRAME 


VCLK 


VD[7:0] 


Figure 15-4. 8-bit Single Scan Display Type STN LCD Timing 
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TFT LCD CONTROLLER OPERATION 


The TIMEGEN generates the control signals for LCD driver, such as VSYNC, HSYNC, VCLK, VDEN, and LEND 
signal. These control signals are highly related with the configurations on the LCDCON1/2/3/4/5 registers in the 
REGBAMK. Base on these programmable configurations on the LCD control registers in the REGBANK, the 
TIMEGEN can generate the programmable control signals suitable for the support of many different types of LCD 
drivers. 


The VSYNC signal is asserted to cause the LCD's line pointer to start over at the top of the display. 


The VSYNC and HSYNC pulse generation depends on the configurations of both the HOZVAL field and the LINEVAL 
field in the LCDCON2/3 registers. The HOZVAL and LINEVAL can be determined by the size of the LCD panel 
according to the following equations: 


HOZVAL = (Horizontal display size) -1 
LINEVAL = (Vertical display size) -1 


The rate of VCLK signal depends on the CLKVAL field in the LCDCON1 register. Table 15-3 defines the relationship 
of VCLK and CLKVAL. The minimum value of CLKVAL is 0. 


VCLK(Hz)=HCLK/[(CLKVAL+1)x2] 


The frame rate is VSYNC signal frequency. The frame rate is related with the field of VSYNC, VBPD, VFPD, 
LINEVAL, HSYNC, HBPD, HFPD, HOZVAL, and CLKVAL in LCDCON1 and LCDCON2/3/4 registers. Most LCD 
drivers need their own adequate frame rate. The frame rate is calculated as follows: 


Frame Rate = 1/[ { (VSPW+1) + (VBPD+1) + (LIINEVAL + 1) + (VFPD+1) } x {(HSPW+1) + (HBPD +1) 
+ (HEPD+1) + (HOZVAL + 1) } x {2 x (CLKVAL#1 )/(HCLK) }] 


Table 15-3. Relation Between VCLK and CLKVAL (TFT, HCLK = 60 MHz) 


CLKVAL 60 MHz/X VCLK 


1023 60 MHz/2048 30.0 kHz 


VIDEO OPERATION 


The TFT LCD controller within the S8C2410A supports 1, 2, 4 or 8 bpp (bit per pixel) palettized color displays and 16 
or 24 bpp non-palettized true-color displays. 


256 Color Palette 


The S3C2410A can support the 256 color palette for various selection of color mapping, providing flexible operation 
for users. 
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MEMORY DATA FORMAT (TFT) 


This section includes some examples of each display mode. 


24BPP Display 
(BSWP = 0, HWSWP = 0, BPP24BL = 0) 


es a 


(BSWP = 0, HWSWP = 0, BPP24BL = 1) 


es a ee 
es 
es 
es 
ee ee 


[ei [re] ra] Ps [Ps 


LCD Panel 


VD Pin Descriptions at 24BPP 


VD | 23 | 22 | 21 | 20 | 19 | 18 [17 | 16 | 15] 14 | 13/12 | 11 | 10] 9] 8/7 | 6/5] 4] 3/2] 1/0] 
Red |7/6l/si4}s{2i/ijo/ | | | | | |} tt ttt | 


oreen | | | | | | | | izfelsfatsyetstol | | ttt | | 
sue | | | tT | | ET EE TT fff fat spe} spol 
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16BPP Display 
(BSWP = 0, HWSWP = 0) 


LCD Panel 


VD Pin Connections at 16BPP 
(5:6:5) 


(5:5:5:l) 


|v | 23 | 22| 21 | 20 | 19] 48 | 17 | 16 | 15 | 14 | 13 | 12 
R 


NOTE: The unused VD pins can be used as GPIO. 
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8BPP Display 
(BSWP = 0, HWSWP = 0) 


LCD Panel 


15-18 ELECTRONICS 


$3C2410A LCD CONTROLLER 


4BPP Display 
(BSWP = 0, HWSWP = 0) 


| ist:2e} | prer-2a) | ppes:2o) | prr9-t6) | pista) | prise) | ora | D130) 
ooo | pt | pe | ps |e |||? | 


[oon [pe [rio [er | rie [es [pw | es | rie | 


(BSWP = 1, HWSWP = 0) 


-—_| breve | ovarian) | reso] | ovvesel | prisval | fev] | ors] | ofa) | 
a ae ze 


2BPP Display 
(BSWP = 0, HWSWP = 0) 


[ecor—| 
Ce a a ni a] ac a 


ELEGTRONECS 15-19 


LCD CONTROLLER S3C2410A 


256 PALETTE USAGE (TFT) 


Palette Configuration and Format Control 


The S3C2410A provides 256 color palette for TFT LCD Control. 

The user can select 256 colors from the 64K colors in these two formats. 

The 256 color palette consists of the 256 (depth) x 16-bit SPSRAM. The palette supports 5:6:5 (R:G:B) format and 
5:5:5:1(R:G:B:1) format. 

When the user uses 5:5:5:1 format, the intensity data(l) is used as a common LSB bit of each RGB data. So, 
5:5:5:1 format is the same as R(5+l):G(5+!):B(5+l) format. 

In 5:5:5:1 format, for example, the user can write the palette as in Table 15-5 and then connect VD pin to TFT LCD 
panel(R(5+I)=VD[23:19]+VD[18], VD[10] or VD[2], G(5+I)=VD[15:11]+ VD[18], VD[10] or VD[2], B(5+1)=VD[7:3]+ 
VD[18], VD[10] or VD[2].), and set FRM565 of LCDCON5 register to 0. 


Table 15-4. 5:6:5 Format 


Finpexsitros. [15 [14] as[ 12[ [10] [8] 7[6[5|4]3|2|1[o] Addess | 
PPP ee P| os 
(note1) 


[om _[a [ra [Ra | mo | G5 [Ge [o3| ca] ex] Go| ee) 8a|e2| ai | a0] oxaooco0or | 


Penis el ese a i ee ee 
[Feu [a [ra [ra] | mo G5 [Ge [63] c2| er [Go| ee) 8a|e2| as | a0] oranoooreo 
[number ove [zo [zeferfaofrelis[mlalefs[ol7{est+lal 


Table 15-5. 5:5:5:1 Format 


rwoexeiros [15 ]s4[ 2] 2] [9] e]7]6[ 5] 4] 9] 2] 10] Aarons 
F004 [ra ra} al ni [m0 [e4|co| ce] ci |eo]ea| a0] e2|a1[ao| 1 | oxsD000%00 
[om [ra ra} a] ni [m0 [e4|co| ce] cr |co|e4] a0] s2|e1[a0| 1 | oxsD000W04 


c—_ |ffrTl||lTrrriT{[rrfll] = | 
ee ed 
[number ofvo [zafzeferfaofrelis[wlaletsl7[e[st+fsl=] 


NOTES: 

1. 0x4D000400 is Palette start address. 

2. \VD18, VD10 and VD2 have the same output value, I. 
3. DATA[31:16] is invalid. 


Palette Read/Write 

When the user performs Read/Write operation on the palette, HSTATUS and VSTATUS of LCDCONS register must 
be checked, for Read/Write operation is prohibited during the ACTIVE status of HSTATUS and VSTATUS. 
Temporary Palette Configuration 


The S3C2410A allows the user to fill a frame with one color without complex modification to fill the one color to the 
frame buffer or palette. The one colored frame can be displayed by the writing a value of the color which is displayed 
on LCD panel to TPALVAL of TPAL register and enable TPALEN. 
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A[31] A[30] A[29] A[28] A[27] A[26] A[25] A[24] A[23] A[22] A[21] A[20] A[19] A[18] A[17] A[16] 


eae] ee | Sai] Ge | ce [ee [pet oo aa} 98:02) et 80: | 


ee SO | ete cE ae |e (Ot |e) 


A[15] A[14] A[13] A[12] A[11] A[10] A[9] A[8] A[7] A[6] A[5] A[4] A[3] A[2] A[1] Af] 


LCD Panel 


16BPP 5:5:5+1 Format (Non-Palette) 


A[31] A[30] A[29] A[28] A[27] A[26] A[25] A[24] A[23] A[22] A[21] A[20] A[19] A[18] A[17] A[16] 


fee Te 2 | a |G 02 |] 20) 249, ee | a eo 


ee 
le es I I es ees ee eee ee eae 


A[15] A[14] A[13] A[12] A[11] A[10] A[9] A[8] A[7] A[6] A[5] A[4] A[3] A[2] A[1] AO] 


LCD Panel 


16BPP 5:6:5 Format (Non-Palette) 


Figure 15-5. 16BPP Display Types (TFT) 
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VSYNC 


HSYNC 


| 
VFPD+1 


HBPD+1 
HSPW+4 HOZVAL+1 HFPD+1 


Figure 15-6. TFT LCD Timing Example 
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SAMSUNG TFT LCD PANEL (3.5” PORTRAIT / 256K COLOR /REFLECTIVE A-SI TFT LCD) 
The S3C2410A supports SEC TFT LCD panel (SAMSUNG 3.5” Portrait / 256K Color /Reflective a-Si TFT LCD). 


LTS350Q1-PD1: TFT LCD panel with touch panel and front light unit 
LTS350Q1-PD2: TFT LCD panel only 


The S3C2410A provides timing signals as follows to use LTS350Q1-PD1 and PD2: 


STH: Horizontal Start Pulse 

TP: Source Driver Data Load Pulse 
INV: Digital Data Inversion 
LCD_HCLK: Horizontal Sampling Clock 

CPV: Vertical Shift Clock 

STV: Vertical Start Pulse 

OE: Gate On Enable 

REV: Inversion Signal 

REVB: Inversion Signal 


So, LTS350Q1-PD1 and PD2 can be connected with the S83C2410A without using the additional timing control logic. 
But the user should additionally apply Vcom generator circuit, various voltages, INV signal and Gray scale voltage 
generator circuit, which is recommended by PRODUCT INFORMATION (SPEC) of LTS350Q1-PD1 and PD2. 
Detailed timing diagram is also described in PRODUCT INFORMATION (SPEC) of LTS350Q1-PD1 and PD2. 


Refer to the documentation (PRODUCT INFORMATION of LTS350Q1-PD1 and PD2), which is prepared by AMLCD 
Technical Customer Center of Samsung Electronics Co., LTD. 
Caution: 


The S3C2410A has HCLK, working as the clock of AHB bus. 

Accidentally, SEC TFT LCD panel (LTS350Q1-PD1 and PD2) has Horizontal Sampling Clock (HCLK). 

These two HCLKs may cause a confusion. So, note that HCLK of the S8C2410A is HCLK and other HCLK of the 
LTS350 is LCD_HCLK. 


Check that the HCLK of SEC TFT LCD panel (LTS350Q1-PD1 and PD2) is changed to LCD_HCLK. 
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VIRTUAL DISPLAY (TFT/STN) 


The S3C2410A supports hardware horizontal or vertical scrolling. If the screen is scrolled, the fields of LCDBASEU 
and LCDBASEL in LCDSADDR1/2 registers need to be changed (see Figure 15-7), except the values of 
PAGEWIDTH and OFFSIZE. 

The video buffer in which the image is stored should be larger than the LCD panel screen in size. 


PAGEWIDTH OFFSIZE 


This is the data of line 1 of virtual screen. 


This is the ddta of line 2 of virtual screen. 

This is the ddta of line 3 of virtual screen. 

This is the ddta of line 4 of virtual screen. LINEVAL + 1 

This is the ddta of line 5 of virtual screen. 

This is the data of line 6 of virtual screen. 
Yhis is the/data of line 7 of virtual scraen. This is the data of line irtual screen. 
This is tHe data of line 8 of virtual scre@n. This is the data of line 8 of virtual screen. . 

View Port 
This is/the data of line 9 of virtual screen. This is the data of line 9 of virtual screen. (The same size 
F é 5: of : : of LCD panel.) 

This/As the data of line 10 of virtual screen. This is the data of line 10 of virtual screen. 


is the data of line 11 of virtual screen) This is the data of line 11 of virtual screen. 
LCDBASEU 


Before Scrolling 


LCDBASEL This is the data ofine 1 of virtual screen. This i$ the data of line 1 of virtual screen. 


This is the data of line Aof virtual screen. This is\the data of line 2 of virtual screen. 
This is the data of line 3 of virtual screen. 
This is the data of line 4 of virtualfscreen. 
This is the\data of line 5 of virtualfscreen. 
This is the data of line 6 of virtualfscreen. 
This is the data of line 7 of virtualfscreen. 
This is the data of line 8 of virtualfscreen. 

This is the data of line 9 of virtual screen. This is the data of line 9 of virtual screen. 

This is the data of line 10 of virtual screen. This is the data of line 10 of virtual screen. 


This is the data of line 11 of virtual screen. This is the data of line 11 of virtual screen. 


After Scrolling 


Figure 15-7. Example of Scrolling in Virtual Display (Single Scan) 
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LCD POWER ENABLE (STN/TFT) 


The S3C2410A provides Power enable (PWREN) function. When PWREN is set to make PWREN signal enabled, 
the output value of LCD_PWREN pin is controlled by ENVID. In other words, If LCD_PWREN pin is connected to the 
power on/off control pin of the LCD panel, the power of LCD panel is controlled by the setting of ENVID automatically. 
The S3C2410A also supports INVPWREN bit to invert polarity of the PWREN signal. 


This function is available only when LCD panel has its own power on/off control port and when port is connected to 
LCD_PWREN pin. 


LCD_PWREN 


VFRAME 


STN LCD 


LCD_PWREN 
LCD Panel ON 


1 FRAME 


Figure 15-8. Example of PWREN Function (PWREN = 1, INVPWREN = 0) 
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LCD CONTROLLER SPECIAL REGISTERS 


LCD Control 1 Register 


LCDCON1 0X4D000000 LCD control 1 register 0x00000000 


LINECNT [27:18] | Provide the status of the line counter. 0000000000 
(read only) Down count from LINEVAL to 0 
CLKVAL [17:8] | Determine the rates of VCLK and CLKVAL[9:0]. 0000000000 
STN: VCLK = HCLK / (CLKVAL x 2) ( CLKVAL 2 2 ) 
TFT: VCLK = HCLK / [((CLKVAL+1) x 2] ( CLKVAL = 0 ) 
MMODE [7] Determine the toggle rate of the VM. 
0 = Each Frame, 
1 = The rate defined by the MVAL 


PNRMODE [6:5] Select the display mode. 
00 = 4-bit dual scan display mode (STN) 
01 = 4-bit single scan display mode (STN) 
10 = 8-bit single scan display mode (STN) 
11 = TFT LCD panel 


BPPMODE [4:1] Select the BPP (Bits Per Pixel) mode. 
0000 = 1 bpp for STN, Monochrome mode 
0001 = 2 bpp for STN, 4-level gray mode 
0010 = 4 bpp for STN, 16-level gray mode 
0011 = 8 bpp for STN, color mode 
0100 = 12 bpp for STN, color mode 
1000 = 1 bpp for TFT 
1001 = 2 bpp for TFT 
1010 = 4 bpp for TFT 
1011 =8 bpp for TFT 
1100 = 16 bpp for TFT 
1101 = 24 bpp for TFT 


ENVID LCD video output and the logic enable/disable. 
0 = Disable the video output and the LCD control signal. 
1 = Enable the video output and the LCD control signal. 
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LCD Control 2 Register 


LCDCON2 0xX4D000004 LCD control 2 register 0x00000000 


VBPD [31:24] | TFT: Vertical back porch is the number of inactive lines at the start of 0x00 
a frame, after vertical synchronization period. 
STN: These bits should be set to zero on STN LCD. 


LINEVAL [23:14] | TFT/STN: These bits determine the vertical size of LCD panel. 0000000000 


VFPD [13:6] | TFT: Vertical front porch is the number of inactive lines at the end of 00000000 
a frame, before vertical synchronization period. 
STN: These bits should be set to zero on STN LCD. 

VSPW [5:0] TFT: Vertical sync pulse width determines the VSYNC pulse's high 000000 
level width by counting the number of inactive lines. 
STN: These bits should be set to zero on STN LCD. 
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LCD Control 3 Register 


LCDCON3 0X4D000008 LCD control 3 register 0x00000000 


HBPD (TFT) [25:19] | TFT: Horizontal back porch is the number of VCLK periods between 0000000 
the falling edge of HSYNC and the start of active data. 
) 


WDLY (STN STN: WDLY[1:0] bits determine the delay between VLINE and VCLK 
by counting the number of the HCLK. WDLY[7:2] are reserved. 
00 = 16 HCLK, 01 = 32 HCLK, 10 = 48 HCLK, 11 = 64 HCLK 


HOZVAL [18:8] | TFT/STN: These bits determine the horizontal size of LCD panel. 00000000000 
HOZVAL has to be determined to meet the condition that total bytes 
of 1 line are 4n bytes. If the x size of LCD is 120 dot in mono mode, 
x=120 cannot be supported because 1 line consists of 15 bytes. 
Instead, x=128 in mono mode can be supported because 1 line is 
composed of 16 bytes (4n). LCD panel driver will discard the additional 
8 dot. 


LINEBLANK STN: These bits indicate the blank time in one horizontal line duration 
(STN) time. These bits adjust the rate of the VLINE finely. 
The unit of LINEBLANK is HCLK X 8. 
Ex) If the value of LINEBLANK is 10, the blank time is inserted to 
VCLK during 80 HCLK. 


HFPD (TFT) [7:0] TFT: Horizontal front porch is the number of VCLK periods between 0X00 
the end of active data and the rising edge of HSYNC. 


Programming NOTE 
: In case of STN LCD, (LINEBLANK + WLH + WDLY) value should be bigger than (144+12xTmax). 


(LINEBLANK + WLH + WDLY) = (14 + 8xTmax1 + 4xTmax2) 
= (14 + 12xTmax) 
LEGEND: 
(1) 14: SDRAM Auto refresh bus acquisition cycles 
(2) 8x Tmax1: Cache fill cycle X the Slowest Memory access time (Ex, ROM) 
(3) 4x Tmax2: 0xC~OxE address Frame memory Access time 
(4) 


4) Tmax: Large one of the Tmax1 and Tmax2. 
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LCD Control 4 Register 


LCDCON4 0X4D00000C LCD control 4 register 0x00000000 


MVAL [15:8] | STN: These bit define the rate at which the VM signal will toggle if the 0X00 
MMODE bit is set to logic '1'. 

HSPW(TFT) [7:0] TFT: Horizontal sync pulse width determines the HSYNC pulse's high 0X00 
level width by counting the number of the VCLK. 


WLH(STN) STN: WLH[1:0] bits determine the VLINE pulse's high level width by 
counting the number of the HCLK. 
WLH[7:2] are reserved. 
00 = 16 HCLK, 01 = 32 HCLK, 
10 = 48 HCLK, 11 = 64 HCLK 


ELEGTRONSCS 15-29 


LCD CONTROLLER S3C2410A 


LCD Control 5 Register 


LCDCONS 0X4D000010 LCD control 5 register 0x00000000 


[31:17] | This bit is reserved and the value should be '0'. 


VSTATUS [16:15] | TFT: Vertical Status (read only). 
00 = VSYNC 01 = BACK Porch 
10 = ACTIVE 11 = FRONT Porch 
HSTATUS [14:13] | TFT: Horizontal Status (read only). 
00 = HSYNC 01 = BACK Porch 
10 = ACTIVE 11 = FRONT Porch 
BPP24BL [12] TFT: This bit determines the order of 24 bpp video memory. 
O = LSB valid 1 = MSB Valid 
FRM565 [11] TFT: This bit selects the format of 16 bpp output video data. 
0 = 5:5:5:1 Format 1 = 5:6:5 Format 


STN/TFT: This bit indicates the VLINE/HSYNC pulse polarity. 
0 = Normal 


INVVLINE 
1 = Inverted 


INVVFRAME STN/TFT: This bit indicates the VFRAME/VSYNC pulse 
polarity. 
0 = Normal 
1 = Inverted 

INVVD [7] STN/TFT: This bit indicates the VD (video data) pulse polarity. 
0 = Normal 
1 = VD is inverted. 


INVVCLK [10] STN/TFT: This bit controls the polarity of the VCLK active edge. 
0 = The video data is fetched at VCLK falling edge 
1 = The video data is fetched at VCLK rising edge 
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LCD Control 5 Register (Continued) 


INVVDEN TFT: This bit indicates the VDEN signal polarity. 
0 = Normal 
1 = Inverted 
INVPWREN 
INVLEND 


STN/TFT: This bit indicates the PWREN signal polarity. 
0 = Normal 
1 = Inverted 


TFT: This bit indicates the LEND signal polarity. 
0 = Normal 
1 = Inverted 


TFT: LEND output signal enable/disable. 
0 = Disable LEND signal 
1 = Enable LEND signal 


STN/TFT: Byte swap control bit. 
0 = Swap Disable 
1 = Swap Enable 


ENLEND 
BSWP 
HWSWP 


STN/TFT: Half-Word swap control bit. 
0 = Swap Disable 
1 = Swap Enable 


fo 
oo 
PWREN [3] STN/TFT: LCD_PWREN output signal enable/disable. 
0 = Disable PWREN signal 
1 = Enable PWREN signal 
oO 
iz 
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FRAME BUFFER START ADDRESS 1 REGISTER 


LCDSADDR1 | 0x4D000014 STN/TFT: Frame buffer start address 1 register 0x00000000 


LCDBANK [29:21] | These bits indicate A[30:22] of the bank location for the video buffer in 
the system memory. LCDBANK value cannot be changed even when 
moving the view port. LCD frame buffer should be within aligned 4MB 
region, which ensures that LCDBANK value will not be changed when 
moving the view port. So, care should be taken to use the malloc() 
function. 


LCDBASEU [20:0] | For dual-scan LCD: These bits indicate A[21:1] of the start address of 0x000000 
the upper address counter, which is for the upper frame memory of 
dual scan LCD or the frame memory of single scan LCD. 
For single-scan LCD: These bits indicate A[21:1] of the start address 
of the LCD frame buffer. 


FRAME Buffer Start Address 2 Register 


LCDSADDR2 | 0X4D000018 STN/TFT: Frame buffer start address 2 register 0x00000000 


[20:0] 


LCDBASEL For dual-scan LCD: These bits indicate A[21:1] of the start address of 0x0000 
the lower address counter, which is used for the lower frame memory 
of dual scan LCD. 
For single scan LCD: These bits indicate A[21:1] of the end address 
of the LCD frame buffer. 
LCDBASEL = ((the fame end address) >>1) + 1 
= LCDBASEU + 
(PAGEWIDTH+OFFSIZE)x(LINEVAL+1) 


NOTE: Users can change the LCDBASEU and LCDBASEL values for scrolling while the LCD controller is turned on. 
But, users must not change the value of the LCDBASEU and LCDBASEL registers at the end of FRAME by referring 
to the LINECNT field in LCDCON1 register, for the LCD FIFO fetches the next frame data prior to the change in the 
frame. 
So, if you change the frame, the pre-fetched FIFO data will be obsolete and LCD controller will display an incorrect 
screen. To check the LINECNT, interrupts should be masked. If any interrupt is executed just after reading 
LINECNT, 
the read LINECNT value may be obsolete because of the execution time of Interrupt Service Routine (ISR). 
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FRAME Buffer Start Address 3 Register 


LCDSADDR3 | 0X4D00001C STN/TFT: Virtual screen address set 0x00000000 


OFFSIZE [21:11] | Virtual screen offset size (the number of half words). 00000000000 
This value defines the difference between the address of the last half 
word displayed on the previous LCD line and the address of the first 
half word to be displayed in the new LCD line. 


PAGEWIDTH [10:0] | Virtual screen page width (the number of half words). 000000000 
This value defines the width of the view port in the frame. 


NOTE: The values of PAGEWIDTH and OFFSIZE must be changed when ENVID bit is 0. 


Example 1. LCD panel = 320*240, 16gray, single scan 
Frame start address = 0x0c500000 
Offset dot number = 2048 dots ( 512 half words ) 


LINEVAL = 240-1 = Oxef 

PAGEWIDTH = 320*4/16 = 0x50 

OFFSIZE = 512 = 0x200 

LCDBANK = 0x0c500000 >> 22 = 0x31 

LCDBASEU = 0x100000 >> 1 = 0x80000 

LCDBASEL = 0x80000 + ( 0x50 + 0x200 ) * ( Oxef + 1) = Oxa2b00 


Example 2. LCD panel = 320*240, 16gray, dual scan 
Frame start address = 0x0c500000 
Offset dot number = 2048 dots ( 512 half words ) 


LINEVAL = 120-1 = 0x77 

PAGEWIDTH = 320*4/16 = 0x50 

OFFSIZE = 512 = 0x200 

LCDBANK = 0x0c500000 >> 22 = 0x31 

LCDBASEU = 0x100000 >> 1 = 0x80000 

LCDBASEL = 0x80000 + ( 0x50 + 0x200 ) * ( 0x77 + 1 ) = 0x91580 


Example 3. LCD panel = 320*240, color, single scan 
Frame start address = 0x0c500000 
Offset dot number = 1024 dots ( 512 half words ) 


LINEVAL = 240-1 = Oxef 

PAGEWIDTH = 320*8/16 = Oxa0 

OFFSIZE = 512 = 0x200 

LCDBANK = 0x0c500000 >> 22 = 0x31 

LCDBASEU = 0x100000 >> 1 = 0x80000 

LCDBASEL = 0x80000 + ( Oxa0 + 0x200 ) * ( Oxef + 1) = Oxa7600 
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RED Lookup Table Register 


REDLUT 0X4D000020 STN: Red lookup table register 0x00000000 


REDVAL [31:0] | These bits define which of the 16 shades will be chosen by each of 0x00000000 
the 8 possible red combinations. 
000 = REDVALJ[3:0], 001 = REDVAL[7:4] 
010 = REDVAL[1 1:8], 011 = REDVAL[15:12] 
100 = REDVAL[19:16], 101 = REDVAL[23:20] 
110 = REDVAL[27:24], 111 = REDVAL[31:28] 


GREEN Lookup Table Register 


GREENLUT | 0x4D000024 | R/W_ | STN: Green lookup table register 0x00000000 


GREENVAL [31:0] | These bits define which of the 16 shades will be chosen by each of 0x00000000 
the 8 possible green combinations. 
000 = GREENVAL{[3:0], 001 = GREENVAL[7:4] 
010 = GREENVAL[1 1:8], 011 = GREENVAL[15:12] 
100 = GREENVAL[19:16], 101 = GREENVAL[23:20] 
110 = GREENVAL[27:24], 111 = GREENVAL[31:28] 


BLUE Lookup Table Register 


BLUELUT 0X4D000028 STN: Blue lookup table register 0x0000 


BLUEVAL [15:0] | These bits define which of the 16 shades will be chosen by each of 0x0000 
the 4 possible blue combinations. 
00 = BLUEVALJ[3:0], 01 = BLUEVAL[7:4] 
10 = BLUEVAL[11:8], 9 11 = BLUEVAL[15:12] 


NOTE: Address from 0x4D00002C to 0x4D000048 should not be used. This area is reserved for Test mode. 
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Dithering Mode Register 


DITHMODE 0X4D00004C R/W STN: Dithering mode register. 0x00000 
This register reset value is 0x00000 But, user can 
change this value to 0x12210. 
(Refer to a sample program source for the latest 
value of this register.) 


DITHMODE | Bit | Description Initial state 


DITHMODE [18:0] | Use one of following value for your LCD: 0x00000 
0x00000 or 0x12210 
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Temp Palette Register 


TPAL 0X4D000050 R/W TFT: Temporary palette register. 0x00000000 
This register value will be video data at next frame. 


TPALEN [24] Temporary palette register enable bit. 
0 = Disable 1 = Enable 


TPALVAL [23:0] | Temporary palette value register. 0x000000 
TPALVAL[23:16] : RED 
TPALVAL[15:8] : GREEN 
TPALVAL[7:0] : BLUE 
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LCD Interrupt Pending Register 


LCDINTPND 0X4D000054 Indicate the LCD interrupt pending register 


INT_FrSyn [1] LCD frame synchronized interrupt pending bit. 
0 = The interrupt has not been requested. 
1 = The frame has asserted the interrupt request. 
INT_FiCnt LCD FIFO interrupt pending bit. 
0 = The interrupt has not been requested. 
1 = LCD FIFO interrupt is requested when LCD FIFO reaches trigger 
level. 


LCD Source Pending Register 


LCDSRCPND | 0X4D000058 Indicate the LCD interrupt source pending register | oxo 


0x0 


INT_FrSyn [1] LCD frame synchronized interrupt source pending bit. 
0 = The interrupt has not been requested. 
1 = The frame has asserted the interrupt request. 


INT_FiCnt LCD FIFO interrupt source pending bit. 
0 = The interrupt has not been requested. 
1 = LCD FIFO interrupt is requested when LCD FIFO reaches trigger 
level. 
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LCD Interrupt Mask Register 


R/W Determine which interrupt source is masked. 0x3 
The masked interrupt source will not be serviced. 


LCDINTMSK Description 
Determine the trigger level of LCD FIFO. 


FIWSEL [2] 
0 = 4 words 1 = 8 words 
INT_FrSyn [1] Mask LCD frame synchronized interrupt. 1 
0 = The interrupt service is available. 
1 = The interrupt service is masked. 
INT_FiCnt lea Mask LCD FIFO interrupt. 


0 = The interrupt service is available. 
1 = The interrupt service is masked. 


LPC3600 Control Register 


LPCSEL OX4D000060 This register controls the LPC3600 modes. 


LPCSEL 


a 


| a | 
a Determine LPC3600 Enable/Disable. ee 


LPC_EN 


0 = LPC3600 Disable 
1 = LPC3600 Enable 
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Register Setting Guide (STN) 


The LCD controller supports multiple screen sizes by special register setting. 


The CLKVAL value determines the frequency of VCLK. This value has to be determined such that the VCLK value is 
greater than data transmission rate. The data transmission rate for the VD port of the LCD controller is used to 
determine the value of CLKVAL register. 


The data transmission rate is given by the following equation: 


Data transmission rate = HS x VS x FR x MV 


HS: Horizontal LCD size 
VS: Vertical LCD size 

FR: Frame rate 

MV: Mode dependent value 


Table 15-6. MV Value for Each Display Mode 


oti 


The LCDBASEU register value is the first address value of the frame buffer. The lowest 4 bits must be eliminated for 
burst 4 word access. The LCDBASEL register value depends on LCD size and LCDBASEU. The LCDBASEL value is 
given by the following equation: 


LCDBASEL = LCDBASEU + LCDBASEL offset 
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Example 1: 
160 x 160, 4-level gray, 80 frame/sec, 4-bit single scan display, HCLK frequency is 60 MHz WLH = 1, WDLY = 1. 


Data transmission rate = 160 x 160 x 80 x 1/4 = 512 kHz 
CLKVAL = 58, VCLK = 517 kHz 
HOZVAL = 39, LINEVAL = 159 


LINEBLANK =10 


LCDBASEL = LCDBASEU + 3200 
NOTE: The higher the system load is, the lower the cpu performance is. 


Example 2 (Virtual Screen Register): 
4 -level gray, Virtual screen size = 1024 x 1024, LCD size = 320 x 240, LCDBASEU = 0x64, 4-bit dual scan. 


1 halfword = 8 pixels (4-level gray), 

Virtual screen 1 line = 128 halfword = 1024 pixels, 
LCD 1 line = 320 pixels = 40 halfword, 

OFFSIZE = 128 - 40 = 88 = 0x58, 

PAGEWIDTH = 40 = 0x28 


LCDBASEL = LCDBASEU + (PAGEWIDTH + OFFSIZE) x (LINEVAL +1) = 100 + (40 + 88) x 120 = 0 x 3064 


Known Problem of STN LCD 


: If Enable and Disable Video output, [ENVID] of LCDCON1 Register, it is repeated over 100times, 
there could be 1Word data loss in case of STN. But the probability of this symptom is very low. 


=> Workaround : You should insert the below function in your code right before Enable Video output. 


void Lcd_Workaround (void) 
{ 


int loop=7; 


rLCDCON5=rLCDCON5&~(1<<3); // Disable LCD_PWREN, If you don't use LCD_PWREN, you can 
remove this line. 


for(i=0; |<loop; I++) 


rLCDCON1|=1; // ENVID=ON 
rLCDCON1 =rLCDCON1 & OxSfffe; // ENVID Off 


} 


rLCDCON5|=(1<<3); //Enable LCD_PWREN, If you don't use LCD_PWREN, then you can remove this line. 
} 
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Gray Level Selection Guide 


The S3C2410A LCD controller can generate 16 gray level using Frame Rate Control (FRC). The FRC characteristics 
may cause unexpected patterns in gray level. These unwanted erroneous patterns may be shown in fast response 
LCD or at lower frame rates. 


Because the quality of LCD gray levels depends on LCD's own characteristics, the user has to select an appropriate 
gray level after viewing all gray levels on user's own LCD. 


Select the gray level quality through the following procedures: 


1. Get the latest dithering pattern register value from SAMSUNG. 

2. Display 16 gray bar in LCD. 

3. Change the frame rate into an optimal value. 

4. Change the VM alternating period to get the best quality. 

5. As viewing 16 gray bars, select a good gray level, which is displayed well on your LCD. 


6. Use only the good gray levels for quality. 


LCD Refresh Bus Bandwidth Calculation Guide 


The S3C2410A LCD controller can support various LCD display sizes. To select a suitable size (for the flicker free 
LCD system application), the user have to consider the LCD refresh bus bandwidth determined by the LCD display 
size, bit per pixel (bpp), frame rate, memory bus width, memory type, and so on. 


LCD Data Rate (Byte/s) = bpp x (Horizontal display size) x (Vertical display size) x (Frame rate) /8 
LCD DMA Burst Count (Times/s) = LCD Data Rate(Byte/s) /16(Byte) ; LCD DMA using 4words(16Byte) burst 


Pdma means LCD DMA access period. In other words, the value of Pdma indicates the period of four-beat burst (4- 
words burst) for video data fetch. So, Pdma depends on memory type and memory setting. 
Eventually, LCD System Load is determined by LCD DMA Burst Count and Pdma. 


LCD System Load = LCD DMA Burst Count x Pdma 


Example 3: 
640 x 480, 8bpp, 60 frame/sec, 16-bit data bus width, SDRAM (Trp=2HCLK / Trcd=2HCLK / CL=2HCLK) and HCLK 
frequency is 60 MHz 


LCD Data Rate = 8 x 640 x 480 x 60 / 8 = 18.432Mbyte/s 
LCD DMA Burst Count = 18.432 / 16 = 1.152M/s 

Pdma = (Trp+Trcd+CL+(2 x 4)+1) x (1/60 MHz) = 0.250ms 
LCD System Load = 1.152 x 250 = 0.288 


System Bus Occupation Rate = (0.288/1) x 100 = 28.8% 
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Register Setting Guide (TFT LCD) 
The CLKVAL register value determines the frequency of VCLK and frame rate. 


Frame Rate = 1/[ { (VSPW+1) + (VBPD+1) + (LIINEVAL + 1) + (VFPD+1) } x {(HSPW+1) + (HBPD +1) 
+ (HFPD+1) + (HOZVAL + 1) } x {2 x (CLKVAL#1 )/(HCLK) } ] 


For applications, the system timing must be considered to avoid under-run condition of the fifo of the Icd controller 
caused by memory bandwidth contention. 


Example 4: 
TFT Resolution: 240 x 240, 


VSPW = 2, VBPD = 14, LINEVAL = 239, VFPD = 4 

HSPW = 25, HBPD = 15, HOZVAL = 239, HFPD = 1 

CLKVAL = 5 

HCLK = 60M (Hz) 

The parameters below must be referenced by LCD size and driver specifications: 
VSPW, VBPD, LINEVAL, VFPD, HSPW, HBPD, HOZVAL, and HFPD 

If target frame rate is 60—70Hz, then CLKVAL should be 5. 


So, Frame Rate = 67Hz 


Known Problems 


Problem : In a MDS, such as Multi-ICE, some of the LCD controller registers may be displayed incorrectly in 
the memory view window of the ARM debugger. 


Solution : The LCD controller register will be displayed correctly unless the memory view window is used. 
Instead, use 'pr' command in the debugger console window. 
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ADC & TOUCH SCREEN INTERFACE 


OVERVIEW 


The 10-bit CMOS analog to digital converter (ADC) of the S8C2410A is a recycling typed device with 8-channel 
analog inputs. It converts the analog input signal into 10-bit binary digital codes at a maximum conversion rate of 
500KSPS with 2.5 MHz A/D converter clock. The A/D converter operates with on-chip, sample-and-hold function and 
power down mode is supported. 


The S3C2410A supports Touch Screen Interface, which consists of a touch screen panel, four external transistors, 
an external voltage source, AIN[7] and AIN[5] (see Figure 16-2). 

Touch Screen Interface controls and selects control signals (nNYPON, YMON, nXPON and XMON) and analog pads 
(AIN[7], AIN[5]) which are connected with pads of touch screen panel and the external transistor for X-position 
conversion and Y-position conversion. 

Touch Screen Interface contains an external transistor control logic and an ADC interface logic with an interrupt 
generation logic. 


FEATURES 


— Resolution: 10-bit 

— Differential Linearity Error: + 1.0 LSB 
— Integral Linearity Error: + 2.0 LSB 

— Maximum Conversion Rate: 500 KSPS 
— Low Power Consumption 

— Power Supply Voltage: 3.3V 

— Analog Input Range: 0 ~ 3.3V 

— On-chip Sample-and-hold Function 

— Normal Conversion Mode 

— Separate X/Y position conversion Mode 
— Auto (Sequential) X/Y Position Conversion Mode 


— Waiting for Interrupt Mode 
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ADC & TOUCH SCREEN INTERFACE OPERATION 


BLOCK DIAGRAM 


Figure 16-1 shows the functional block diagram of the S8C2410A A/D converter and Touch Screen Interface. Note 
that the A/D converter is a recycling type. 

A pull-up resister is attached to AIN[7] on VDDA_ADC. So, XP pad of the touch screen panel should be connected 
with AIN[7] of the S3C2410A and YP pad of the touch screen panel should be connected with AIN[5]. 


External 
Transistor 
Control 


VDDA_ADC 


AIN(7] 
AIN[6] 
AIN(5] ADC 


AIN[4] : Interface 


&Touch 
AIN(S| Screen 


AIN[2] Controller 


AIN[1] 
ADC Input Interrupt 
Control Generation 


AIN[0] 
VSSA_ADC 
Waiting for Interrupt Mode 


Figure 16-1. ADC and Touch Screen Interface Block Diagram 
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EXAMPLE FOR TOUCH SCREEN 


In this example, AIN[7] is connected with XP and AIN[5]is connected with YP pad of the touch screen panel. 
To control pads of the touch screen panel (XP, XM, YP and YM), four external transistors are applied and control 
signals including nYPON, YMON, nXPON and XMON are connected with four external transistors. 


EINT[22] External 
EINT[21] Transistor 


Control 
EINT[20] eae 


External Voltage Source 


XP 


XM 


YP 


YM 


Touch Panel S3C2410A 


Figure 16-2. Example of ADC and Touch Screen Interface 


The following procedure is suggested: 


1. Connect pads of the touch screen panel to the S83C2410A using external transistor (see Figure 16-2). 


2. Select Separate X/Y Position Conversion Mode or Auto (Sequential) X/Y Position Conversion Mode to get X/Y 
position. 


Set Touch Screen Interface to Waiting Interrupt Mode, 


If interrupt occurs, then appropriate conversion (Separate X/Y Position Conversion Mode or Auto (Sequential) X/Y 
Position Conversion Mode) is activated. 


5. After get the proper value of X/Y position, return to Waiting for Interrupt Mode. 


NOTES 


1. External voltage source should be 3.3 V. 
2. Internal resistance of the external transistor should be under 5 ohm. 
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FUNCTION DESCRIPTIONS 


A/D Conversion Time 


When the PCLK frequency is 50 MHz and the prescaler value is 49, total 10-bit conversion time is given: 


A/D converter freq. = 50 MHz/(49+1) = 1 MHz 
Conversion time = 1/(1 MHz / 5cycles) = 1/200 kHz = 5 us 


NOTE 


This A/D converter is designed to operate at maximum 2.5 MHz clock, so the conversion rate can go up to 
500 KSPS. 


Touch Screen Interface Mode 
1. Normal Conversion Mode 


Normal Conversion Mode (AUTO_PST = 0, XY_PST = 0) is generally used for General Purpose ADC Conversion. 
This mode can be initialized by setting the ADCCON and ADCTSC and completed with a read the XPDATA 
(Normal ADC) value of ADCDATO (ADC Data Register 0). 


2. Separate X/Y Position Conversion Mode 


Separate X/Y Position Conversion Mode is consist of two Conversion Modes: X-Position Mode and Y-Position 
Mode. 

The first mode is operated in the following way: 

X-Position Mode (AUTO_PST = 0 and XY_PST = 1) writes X-position conversion data to XPDATA of ADCDATO 
register. After conversion, The Touch Screen Interface generates the Interrupt source (INT_ADC) to Interrupt 
Controller. 

Y-Position Mode (AUTO_PST = 0 and XY_PST = 2) writes Y-position conversion data to YPDATA of ADCDAT1. 
After the conversion, the Touch Screen Interface also generates the Interrupt source (INT_ADC) to Interrupt 
Controller. 


Table 16-1. Condition of Touch Screen Panel Pads in Separate X/Y Position Conversion Mode 


Se 
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3. Auto (Sequential) X/Y Position Conversion Mode. 


Auto (Sequential) X/Y Position Conversion Mode (AUTO_PST = 1 and XY_PST = 0) is operated in the following 
way: 

The Touch Screen Controller automatically converts X-position and Y-position. The Touch Screen Controller 
writes X-measurement data to XPDATA of ADCDATO, and then writes Y-measurement data to YPDATA of 
ADCDAT1. After Auto (Sequential) Position Conversion, The Touch Screen Controller generates Interrupt source 
(INT_ADC) to Interrupt Controller. 


Table 16-2. Condition of Touch Screen Panel Pads in Auto (Sequential) X/Y Position Conversion Mode. 


ee 


4. Waiting for Interrupt Mode. 


When Touch Screen Controller is in Waiting for Interrupt Mode, it waits for Stylus down. The controller generates 
Interrupt (INT_TC) signals when the Stylus is down on Touch Screen Panel. 

After an interrupt occurs, X and Y position can be read by the proper conversion mode (Separate X/Y position 
conversion Mode or Auto X/Y Position Conversion Mode). 


Table 16-3. Condition of Touch Screen Panel Pads in Waiting for Interrupt Mode. 


eo 
Waiting for Interrupt Mode Pull-up AIN(S] 


Standby Mode 


Standby mode is activated when STDBM of ADCCON register is set to '1'. In this mode, A/D conversion operation is 
halted and XPDATA (Normal ADC) of ADCDATO and YPDATA of ADCDAT1 contain the previous converted data. 
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Programming Notes 


1. The A/D converted data can be accessed by means of interrupt or polling method. With interrupt method, 
the overall conversion time - from A/D converter start to converted data read - may be delayed because of 
the return time of interrupt service routine and data access time. With polling method, by checking the 
ADCCON{[15] - end of conversion flag-bit, the read time from ADCDAT register can be determined. 


2. A/D conversion can be activated in different way: After ADCCON[1] - A/D conversion start-by-read 
mode-is set to 1, A/D conversion starts simultaneously whenever converted data is read. 


X-Conversion Y-Gonversion 
i) 
1 
i} 
‘ 


stylus Down Stylus Up 


' 
i<$—__—_ ii 
A BC 


D x (1/X-Tal Clock) or A = D x (1/External Clock) 
D x (1/PCLk) 

D x (1/PCLk) 

DELAY value of ADCDLY Register 


Figure 16-3 Timing Diagram in Auto (Sequential) X/Y Position Conversion Mode 
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ADC AND TOUCH SCREEN INTERFACE SPECIAL REGISTERS 


ADC CONTROL (ADCCON) REGISTER 


ADCCON 0x58000000 ADC control register Ox3FC4 


[15] 


ECFLG End of conversion flag (read only). 
0 = A/D conversion in process 
1 = End of A/D conversion 
PRSCEN [14] A/D converter prescaler enable. 
0 = Disable 
1 = Enable 


PRSCVL [13:6] | A/D converter prescaler value. 
Data value: 1 ~ 255 
Note that division factor is (N+1) when the prescaler value is N. 
NOTE: ADC frequency should be set less than PCLK by 5 times. 
(Ex. PCLK = 10MHz, ADC Frequency < 2MHz) 


[5:3] Analog input channel select. 
000 = AIN 0 
001 = AIN 1 
010 = AIN 2 
011 =AIN3 
100 = AIN 4 
101 =AIN5 
110 =AIN6 
111 = AIN 7 (XP) 


[2 Standby mode select. 
[1 


SEL_MUX 


— [™ | 
READ _ A/D conversion start by read. 
START 0 = Disable start by read operation 
1 = Enable start by read operation 
ENABLE _ A/D conversion starts by setting this bit. 
START If READ_START is enabled, this value is not valid. 
0 = No operation 
1 = A/D conversion starts and this bit is cleared after the start-up. 


0 = Normal operation mode 


] 
1 = Standby mode 
] 
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ADC TOUCH SCREEN CONTROL (ADCTSC) REGISTER 


ADCTSC 0x58000004 ADC touch screen control register 0x058 


This bit should be zero. 


Select output value of YMON. 
0 = YMON output is 0 (YM = Hi-Z). 
1 = YMON output is 1 (YM = GND). 


ADCTSC 


Reserved 


YM_SEN 
YP_SEN 


Select output value of nYPON. 
0 = nYPON output is 0 (YP = External voltage). 
1 =nYPON output is 1 (YP is connected with AIN[5]). 


XP_SEN 


Pull-up switch enable. 
O = XP pull-up enable 
1 = XP pull-up disable 


Automatically sequencing conversion of X-position and Y-position 


PULL_UP 
AUTO_PST 
0 = Normal ADC conversion 
1 = Auto (Sequential) X/Y Position Conversion Mode 


XY_PST [1:0] Manual measurement of X-position or Y-position. 
00 = No operation mode 
01 = X-position measurement 
10 = Y-position measurement 
11 = Waiting for Interrupt Mode 


NOTE: In Auto mode, ADCTSC register should be reconfigured before starting read operation. 


XM_SEN [5] Select output value of XMON. 
0 = XMON output is 0 (XM = Hi-Z). 
1 = XMON output is 1 (XM = GND). 


Select output value of nNXPON. 1 
0 = nXPON output is 0 (XP = External voltage). 
1 =nXPON output is 1 (XP is connected with AIN[7]). 
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ADC START DELAY (ADCDLY) REGISTER 


ADCDLY 0x58000008 ADC start or interval delay register OxOOff 


DELAY [15:0] | 1) Normal Conversion Mode, Separate X/Y Position Conversion Mode, OOff 
and Auto (Sequential) X/Y Position Conversion Mode. 
— X/Y Position Conversion Delay Value. 
2) Waiting for Interrupt Mode. 
When Stylus down occurs in Waiting for Interrupt Mode, this register 
generates Interrupt signal (INT_TC) at intervals of several ms for Auto 
X/Y Position conversion. 
NOTE: Do not use Zero value (0x0000) 


NOTES: 
1. Before ADC conversion, Touch screen uses X-tal clock or EXTCLK (Waiting for Interrupt Mode). 
2. During ADC conversion, PCLK is used. 
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ADC CONVERSION DATA (ADCDATO) REGISTER 


ADCDATO 0x5800000C | oR | ADC conversion data register [oe 


UPDOWN [15] Up or down state of Stylus at Waiting for Interrupt Mode. 
0 = Stylus down state 
1 = Stylus up state 

AUTO_PST [14] Automatic sequencing conversion of X-position and 
Y-position. 
0 = Normal ADC conversion 
1 = Sequencing measurement of X-position, Y-position 


0 


XPDATA X-position conversion data value. (include Normal ADC conversion data 
(Normal ADC) value) 
Data value: 0 ~ 3FF 


XY_PST [13:12] | Manual measurement of X-position or Y-position. 
00 = No operation mode 
01 = X-position measurement 
10 = Y-position measurement 
11 = Waiting for Interrupt Mode 
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ADC CONVERSION DATA (ADCDAT1) REGISTER 


ADCDAT1 0x58000010 | oR | ADC conversion data register a 


UPDOWN [15] Up or down state of Stylus at Waiting for Interrupt Mode. 
0 = Stylus down state 
1 = Stylus up state 
AUTO_PST [14] Automatically sequencing conversion of X-position and Y-position. 
0 = Normal ADC conversion 
1 = Sequencing measurement of X-position, Y-position 


a 


YPDATA Y-position conversion data value 
Data value: 0 ~ 3FF 


XY_PST [13:12] | Manual measurement of X-position or Y-position. 
00 = No operation mode 
01 = X-position measurement 
10 = Y-position measurement 
11 = Waiting for Interrupt Mode 
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NOTES 
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REAL TIME CLOCK (RTC) 


OVERVIEW 


The Real Time Clock (RTC) unit can be operated by the backup battery while the system power is off. The RTC can 
transmit 8-bit data to CPU as Binary Coded Decimal (BCD) values using the STRB/LDRB ARM operation. The data 
include the time by second, minute, hour, date, day, month, and year. The RTC unit works with an external 32.768 
kHz crystal and also can perform the alarm function. 


FEATURES 


— BCD number: second, minute, hour, date, day, month, and year 
— Leap year generator 

— Alarm function: alarms interrupt or wake-up from power-off mode 
— Year 2000 problem is removed. 

— _ Independent power pin (RTCVDD) 

— Supports millisecond tick time interrupt for RTOS kernel time tick. 


— Round reset function 


ELEGTRONECS 17-1 


REAL TIME CLOCK (RTC) S3C2410A 


REAL TIME CLOCK OPERATION 


TICNT TIME TICK 
Time Tick Generator 


128 Hz RTCRST 


i 2'5 Clock Divider Reset Register Leap Year Generator 


XTOrtc 


EP ac Se ae 


Control cone Ree Alarm Generator 


—— 


PMWKUP ALMINT 


Figure 17-1. Real Time Clock Block Diagram 


LEAP YEAR GENERATOR 


The leap year generator can determine the last date of each month out of 28, 29, 30, or 31, based on data from 
BCDDATE, BCDMON, and BCDYEAR. This block considers leap year in deciding on the last date. An 8-bit counter 
can only represent 2 BCD digits, so it cannot decide whether "00" year (the year with its last two digits zeros) is a 
leap year or not. For example, it cannot discriminate between 1900 and 2000. To solve this problem, the RTC block 
in S8C2410A has hard-wired logic to support the leap year in 2000. Note 1900 is not leap year while 2000 is leap 
year. Therefore, two digits of 00 in S8C2410A denote 2000, not 1900. 
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READ/WRITE REGISTERS 


Bit 0 of the RTCCON register must be set high in order to write the BCD register in RTC block. To display the 
second, minute, hour, date, month, and year, the CPU should read the data in BCDSEC, BCDMIN, BCDHOUR, 
BCDDAY, BCDDATE, BCDMON, and BCDYEAR registers, respectively, in the RTC block. However, a one second 
deviation may exist because multiple registers are read. For example, when the user reads the registers from 
BCDYEAR to BCDMIN, the result is assumed to be 2059 (Year), 12 (Month), 31 (Date), 23 (Hour) and 59 (Minute). 
When the user read the BCDSEC register and the value ranges from 1 to 59 (Second), there is no problem, but, if the 
value is 0 sec., the year, month, date, hour, and minute may be changed to 2060 (Year), 1 (Month), 1 (Date), 0 
(Hour) and 0 (Minute) because of the one second deviation that was mentioned. In this case, the user should re-read 
from BCDYEAR to BCDSEC if BCDSEC is zero. 


BACKUP BATTERY OPERATION 


The RTC logic can be driven by the backup battery, which supplies the power through the RTCVDD pin into the RTC 
block, even if the system power is off. When the system is off, the interfaces of the CPU and RTC logic should be 
blocked, and the backup battery only drives the oscillation circuit and the BCD counters to minimize power 
dissipation. 


ALARM FUNCTION 


The RTC generates an alarm signal at a specified time in the power-off mode or normal operation mode. In normal 
operation mode, the alarm interrupt (ALMINT) is activated. In the power-off mode, the power management wakeup 
(PMWKUP) signal is activated as well as the ALMINT. The RTC alarm register (RTCALM) determines the alarm 
enable/disable status and the condition of the alarm time setting. 


TICK TIME INTERRUPT 


The RTC tick time is used for interrupt request. The TICNT register has an interrupt enable bit and the count value for 
the interrupt. The count value reaches '0' when the tick time interrupt occurs. Then the period of interrupt is as 
follows: 


Period = ( n+1 )/ 128 second 
n: Tick time count value (1~127) 


This RTC time tick may be used for real time operating system (RTOS) kernel time tick. If time tick is generated by 
the RTC time tick, the time related function of RTOS will always synchronized in real time. 


ROUND RESET FUNCTION 


The round reset function can be performed by the RTC round reset register (RTCRST). The round boundary (30, 40, 
or 50 sec.) of the second carry generation can be selected, and the second value is rounded to zero in the round 
reset. For example, when the current time is 23:37:47 and the round boundary is selected to 40 sec, the round reset 
changes the current time to 23:38:00. 


NOTE 


All RTC registers have to be accessed for each byte unit using the STRB and LDRB instructions or char 
type pointer. 
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32.768KHZ X-TAL CONNECTION EXAMPLE 


The Figure 17-2 shows a circuit of the RTC unit oscillation at 32.768 kHz. 


15~ 22pF 


C1 32768Hz 


Figure 17-2. Main Oscillator Circuit Example 
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REAL TIME CLOCK SPECIAL REGISTERS 


REAL TIME CLOCK CONTROL (RTCCON) REGISTER 


The RTCCON register consists of 4 bits such as the RTCEN, which controls the read/write enable of the BCD 
registers, CLKSEL, CNTSEL, and CLKRST for testing. 


RTCEN bit can control all interfaces between the CPU and the RTC, so it should be set to 1 in an RTC control 
routine to enable data read/write after a system reset. Also before power off, the RTCEN bit should be cleared to 0 to 
prevent inadvertent writing into RTC registers. 


RTCCON 0x57000040(L) R/W RTC control register 0x0 
0x57000043(B) (by byte) 


CLKRST [3] RTC clock count reset. 
0=Noreset, 1 = Reset 
CNTSEL [2] BCD count select. 
0 = Merge BCD counters 
1 = Reserved (Separate BCD counters) 


CLKSEL [1] BCD clock select. 
0 = XTAL 1/2!5 divided clock 
1 = Reserved (XTAL clock only for test) 
RTCEN RTC control enable. 
0 = Disable 1 = Enable 
NOTE: Only BCD time count and read operation can be performed. 


NOTES: 
1. All RTC registers have to be accessed for each byte unit using STRB and LDRB instructions or char type pointer. 
2. (L): Little endian. 

(B): Big endian. 


TICK TIME COUNT (TICNT) REGISTER 


TICNT 0x57000044(L) R/W Tick time count register 0x0 
0x57000047(B) (by byte) 


TICK INT ENABLE [7] Tick time interrupt enable. 
0 = Disable 1 = Enable 


TICK TIME COUNT Tick time count value (1~127). 000000 
This counter value decreases internally, and users cannot read 
this counter value in working. 
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RTC ALARM CONTROL (RTCALM) REGISTER 
The RTCALM register determines the alarm enable and the alarm time. Note that the RTCALM register generates the 


alarm signal through both ALMINT and PMWKUP in power down mode, but only through ALMINT in the normal 
operation mode. 


Ri 


RTCALM 0x57000050(L) R/W RTC alarm control register 0x0 
0x57000053(B) (by byte) 


a 


ALMEN Alarm global enable. 
0=Disable, 1 = Enable 

YEAREN [5] Year alarm enable. 
0=Disable, 1 = Enable 


MONREN [4] Month alarm enable. 
0=Disable, 1 = Enable 
DATEEN [3] Date alarm enable. 
0=Disable, 1 = Enable 
HOUREN [2] Hour alarm enable. 
0=Disable, 1 = Enable 
MINEN [1] Minute alarm enable. 
0=Disable, 1 = Enable 
SECEN Second alarm enable. 
0=Disable, 1 = Enable 
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ALARM SECOND DATA (ALMSEC) REGISTER 


ALMSEC 0x57000054(L) R/W Alarm second data register 0x0 
0x57000057(B) (by byte) 


esos fm [| SSSS—SCSCSSC*?’ 


SECDATA [6:4] BCD value for alarm second. Sil 
0~5 


| (3:0) | 0] | 0000 


ALARM MIN DATA (ALMMIN) REGISTER 


ALMMIN 0x57000058(L) R/W Alarm minute data register 0x00 
0x5700005B(B) (by byte) 


fresenes | m [| SSS—S—SC—C—CSCSCSSTCC*”r 


MINDATA [6:4] | BCD value for alarm minute. ia 
0~5 


| (3:0) | 0] | 0000 


ALARM HOUR DATA (ALMHOUR) REGISTER 


ALMHOUR 0x5700005C(L) R/W Alarm hour data register 0x0 
0x5700005F (B) (by byte) 


2 


HOURDATA [5:4] | BCD value for alarm hour. 
0~2 


| (301 | 0] | 000 | 
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ALARM DATE DATA (ALMDATE) REGISTER 


ALMDATE 0x57000060(L) R/W Alarm date data register 0x01 
0x57000063(B) (by byte) 


vq [SSCS 


DATEDATA [5:4] | BCD value for alarm date, from 0 to 28, 29, 30, 31. al 
0~3 


| (3:0) | 0] | coo 


ALARM MON DATA (ALMMON) REGISTER 


ALMMON 0x57000064(L) R/W Alarm month data register 0x01 
0x57000067(B) (by byte) 


2 


MONDATA oe BCD value for alarm month. am 
al 


| (3:0) | 0] | 001 


ALARM YEAR DATA (ALMYEAR) REGISTER 


ALMYEAR 0x57000068(L) R/W Alarm year data register 0x0 
0x5700006B(B) (by byte) 


YEARDATA [7:0] BCD value for year. 0x0 
00 ~ 99 
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$3C2410A REAL TIME CLOCK (RTC) 


RTC ROUND RESET (RTCRST) REGISTER 


RTCRST 0x5700006C(L) R/W RTC round reset register 0x0 
0x5700006F (B) (by byte) 


SRSTEN [3] Round second reset enable. 
0 = Disable, 1 = Enable 


SECCR [2:0] Round boundary for second carry generation. 
011 = over than 30 sec 
100 = over than 40 sec 
101 = over than 50 sec 
NOTE: If other values (0, 1, 2, 6, or 7) are set, no second carry is 
generated. But second value can be reset. 


BCD SECOND (BCDSEC) REGISTER 


BCDSEC 0x57000070(L) R/W BCD second register Undefined 
0x57000073(B) (by byte) 


SECDATA [6:4] BCD value for second. Laas 
0~5 


| 13:0) 0) 


BCD MINUTE (BCDMIN) REGISTER 


BCDMIN 0x57000074(L) R/W BCD minute register Undefined 
0x57000077(B) (by byte) 


MINDATA [6:4] | BCD value for minute. = 
0~5 


| [3:0] | 0) 
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BCD HOUR (BCDHOUR) REGISTER 


BCDHOUR 0x57000078(L) R/W BCD hour register Undefined 
0x5700007B(B) (by byte) 


7 [SSCS 


HOURDATA [5:4] | BCD value for hour. ——4 
g=2 


| [3:0] | 0) 


BCD DATE (BCDDATE) REGISTER 


BCDDATE 0x5700007C(L) R/W BCD date register Undefined 
0x5700007F(B) (by byte) 


cf OOSOSOSOSOCC‘dY! 


DATEDATA [5:4] | BCD value for date. a 
0~3 


| 13:0) 0) 


BCD DAY (BCDDAY) REGISTER 


BCDDAY 0x57000080(L) R/W BCD a day of the week register Undefined 
0x57000083(B) (by byte) 


mq [SCS CT 


DAYDATA [2:0] | BCD value for a day of the week. aa 
ee 
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BCD MONTH (BCDMON) REGISTER 


BCDMON 0x57000084(L) R/W BCD month register Undefined 
0x57000087(B) (by byte) 


2 


MONDATA BCD value for month. aa 
O~1 


[3:0] 0~9 
BCD YEAR (BCDYEAR) REGISTER 


BCDYEAR 0x57000088(L) R/W BCD year register Undefined 
0x5700008B(B) (by byte) 


YEARDATA [7:0] BCD value for year. 
00 ~ 99 
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NOTES 
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WATCHDOG TIMER 


OVERVIEW 


The S3C2410A watchdog timer is used to resume the controller operation whenever it is disturbed by malfunctions 
such as noise and system errors. It can be used as a normal 16-bit interval timer to request interrupt service. The 
watchdog timer generates the reset signal for 128 PCLK cycles. 


FEATURES 


— Normal interval timer mode with interrupt request 


— Internal reset signal is activated for 128 PCLK cycles when the timer count value reaches 0 (time-out). 
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WATCHDOG TIMER $3C2410A 


WATCHDOG TIMER OPERATION 
Figure 18-1 shows the functional block diagram of the watchdog timer. The watchdog timer uses only PCLK as its 


source clock. The PCLK frequency is prescaled to generate the corresponding watchdog timer clock, and the 
resulting frequency is divided again. 


Interrupt 


PCLK —¥»| 8-bit Prescaler oe Reset Signal Generator RESET 
(Down Counter) 


| 


WTCON[15:8] WTCON/[4:3] WTCON[2] WTCON(0] 


Figure 18-1. Watchdog Timer Block Diagram 


The prescaler value and the frequency division factor are specified in the watchdog timer control (WTCON) register. 
Valid prescaler values range from 0 to 2°-1. The frequency division factor can be selected as 16, 32, 64, or 128. 


Use the following equation to calculate the watchdog timer clock frequency and the duration of each timer clock 
cycle: 


t_watchdog = 1/( PCLK / (Prescaler value + 1) / Division_factor ) 


WTDAT & WTCNT 


Once the watchdog timer is enabled, the value of watchdog timer data (WTDAT) register cannot be automatically 
reloaded into the timer counter (WTCNT). In this reason, an initial value must be written to the watchdog timer count 
(WTCNT) register, before the watchdog timer starts. 


CONSIDERATION OF DEBUGGING ENVIRONMENT 


When the S3C2410A is in debug mode using Embedded ICE, the watchdog timer is disabled, will be disabled 
automatically. 


The watchdog timer can determine whether or not it is currently in the debug mode from the CPU core signal 
(DBGACK signal). Once the DBGACK signal is asserted, the reset output of the watchdog timer is not activated as 
the watchdog timer is expired. 
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$3C2410A WATCHDOG TIMER 


WATCHDOG TIMER SPECIAL REGISTERS 


WATCHDOG TIMER CONTROL (WTCON) REGISTER 


The WTCON register allows the user to enable/disable the watchdog timer, select the clock signal from 4 different 
sources, enable/disable interrupts, and enable/disable the watchdog timer output. 

The Watchdog timer is used to resume the S3C2410A restart on mal-function after its power on; if controller restart 
is not desired, the Watchdog timer should be disabled. 


If the user wants to use the normal timer provided by the Watchdog timer, enable the interrupt and disable the 
Watchdog timer. 


WTCON 0x53000000 Watchdog timer control register 0x8021 


[15:8] | Prescaler value. 
The valid range is from 0 to (2°-1). 


Reserved. 


These two bits must be 00 in normal operation. 


WTCON 


Enable or disable bit of Watchdog timer. 
0 = Disable 
1 = Enable 


Clock Select [4:3] Determine the clock division factor. 
00: 16 01: 32 
10: 64 11: 128 


Interrupt Generation Enable or disable bit of the interrupt. 
0 = Disable 


1 = Enable 


Reserved [1] Reserved. 
This bit must be 0 in normal operation. 


Reset Enable or disable bit of Watchdog timer output for reset signal. 
Enable/Disable 1: Assert reset signal of the S8C2410A at watchdog time-out 
0: Disable the reset function of the watchdog timer. 
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WATCHDOG TIMER DATA (WTDAT) REGISTER 


The WTDAT register is used to specify the time-out duration. The content of WTDAT cannot be automatically loaded 
into the timer counter at initial watchdog timer operation. However, using 0x8000 (initial value) will drive the first time- 
out. In this case, the value of WTDAT will be automatically reloaded into WTCNT. 


WTDAT 0x53000004 Watchdog timer data register 0x8000 


Count Reload Value | [15:0] | Watchdog timer count value for reload. 0x8000 


WATCHDOG TIMER COUNT (WTCNT) REGISTER 


The WTCNT register contains the current count values for the watchdog timer during normal operation. Note that the 
content of the WTDAT register cannot be automatically loaded into the timer count register when the watchdog timer 
is enabled initially, so the WTCNT register must be set to an initial value before enabling it. 


WTCNT 0x53000008 Watchdog timer count register 0x8000 


Count Value [15:0] | The current count value of the watchdog timer 0x8000 


—_— 
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MMC/SD/SDIO HOST CONTROLLER 


OVERVIEW 


The S3C2410A SD Host controller can support MMC/SD card and SDIO devices. 


FEATURES 


SD Memory Card Spec. (ver. 1.0) / MMC Spec. (2.11) compatible 
SDIO Card Spec (ver. 1.0) compatible 

16 words (64 bytes) FIFO (depth 16) for data Tx/Rx 

40-bit Command Register (SDICARG[31 :0]+SDICCON[7:0]) 

136-bit Response Register (SDIRSPn[127:0]+ SDICSTA[7:0]) 

8-bit Prescaler logic (Freq. = System Clock / (2(P + 1))) 

CRC7 & CRC16 Generator 

Polling, Interrupt and DMA Data Transfer Mode (Byte or Word transfer) 
1-bit / 4-bit (wide bus) Mode & Block / Stream Mode Switch support 
Supports up to 25 MHz in data transfer mode for SD/SDIO 
Supports up to 20 MHz in data transfer mode for MMC 
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BLOCK DIAGRAM 


CMD Control 


PADDR 8bit Shift Reg 


Resp Reg CRC7 
PSEL (17byte) Sener 


I/F 


PWDATA DAT Conte! TxDAT[3:0] 
[31:0] a 32bit Shift Reg 
64byte : 
ge (eye) CRC16"4 RxDAT|3:0] 


DREQ 
DACK 
INT 


Figure 19-1. Block Diagram 
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SDI OPERATION 


A serial clock line is synchronized with the five data lines for shifting and sampling of the information. Making the 
appropriate bit settings to the SDIPRE register depends on the transmission frequency. You can modify its 
frequency to adjust the baud rate data register value. 


Programming Procedure (common) 


SDI modules can be programmed, following these basic steps: 


1. Set SDICON to configure properly with clock and interrupt. 
2. Set SDIPRE to configure with a proper value. 
3. Wait 74 SDCLK clock cycle in order to initialize the card. 


CMD Path Programming 
1. Write command argument (32-bit) to SDICARG register. 
2. Determine command types and start command by setting SDICCON{8]. 


3. Confirm the end of SDI command operation when the specific flag of SDICSTA is set. 
— Ifthe type of command is no-response, the flag is SDICSTA[1 1]. 
— Ifthe type of command is with-response, the flag is SDICSTA[9]. 


4. Clear the corresponding flag of the SDICSTA register by writing one to the flag bit. 


DAT Path Programming 

1. Write timeout period to SDIDTIMER register. 

Write block size (block length) to SDIBSIZE register (normally 0x200 byte). 

Determine the mode of block, wide bus, DMA, etc. and start data transfer with setting SDIDCON register. 


Write Tx-data to SDIDAT register while Tx FIFO is available by checking SDIFSTA (available, half or empty) 
register. 


5. Read Rx-data from SDIDAT register while Rx FIFO is available by checking SDIFSTA (available, half or be last 
data) register. 


FO LW 


Confirm the end of SDI data operation when the flag of data transfer finish (SDIDSTA[4)) is set. 
Clear the corresponding flag of SDIDSTA register by writing one to the flag bit. 


NOTE 


In case of long response command, CRC error can be wrong by H/W but a user can ignore this. It should be 
detected by software if it is need to check. 
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SDIO OPERATION 


There are two functions of the SDIO operation: SDIO Interrupt receiving and Read Wait Request generation. These 
two functions can operate when RevlOInt bit and RwaitEn bit of SDICON register is activated respectively. Detailed 
steps and conditions for the two functions are described below. 


SDIO Interrupt 
In SD 1-bit mode, the interrupt is received through all ranges from SDDAT1 pin. 


In SD 4-bit mode, SDDAT1 pin is shared between to receive data and interrupts. When interrupt detection ranges 
(Interrupt Period) are: 


1. Single Block: the time between A and B 


— A: 2clocks after the completion of a data packet 


—  B: The completion of sending the end bit of the next with-data command 


2. Multi Block, SDIDCON[21] = 0: the time between A and B, restart interrupt detection range at C 
— A: 2clocks after the completion of a data packet 
— B: 2clocks after A 


— C: 2clocks after the end bit of the abort command response 


3. Multi Block, SDIDCON[21] = 1: the time between A and B, restart at A 
— A: 2clocks after the completion of a data packet 
— B: 2clocks after A 
In case of last block, interrupt period begins at last A, but it does not end at B (CMD53 case). 


Read Wait Request 
Regardless of 1-bit or 4-bit mode, Read Wait Request signal transmits to SDDAT2 pin in the condition below. 


— Inread multiple operation, request signal transmission begins in 2clocks after the end of data block. 


— Transmission ends when the user writes one to SDIDSTA[10]. 
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SDI SPECIAL REGISTERS 
SDI Control (SDICON) Register 


SDICON 0x5A000000 SDI control register 


Byte Order Type [ Determine byte order type when you read (write) data from (to) SD 
(ByteOrder) host FIFO with word boundary. 
[ 


0 = Type A, 1 = Type B 


(RevlOInt) 


Read Wait Enable 
(RWaitEn) 


0 = ignore, 1 = receive SDIO Interrupt 


Determine read wait request signal generate when SD host waits 
the next block in multiple block read mode. This bit needs to 
delay the next block to be transmitted from the card (for SDIO). 
0 = disable (no generate), 1 = Read wait enable (use SDIO) 


4] 
Receive SDIO 3] Determine whether SD host receives SDIO Interrupt from the card 
Interrupt from card or not (for SDIO). 

2] 

1] 


[ 
FIFO Reset (FRST) [ Reset FIFO value. This bit is automatically cleared. 
0 = normal mode, 1 = FIFO reset 


Clock Type (CTYP) Determines which clock type is used as SDCLK. 
0 = MMC Type, 1 = SD Type 


NOTE: Byte Order Type 
- Type A: D[7:0] — D[15:8] — D[23:16] > D[31:24] 
- Type B: D[31:24] — D[23:16] > D[15:8] — D[7:0] 


SDI Baud Rate Prescaler (SDIPRE) Register 


SDIPRE 0x5A000004 SDI baud rate prescaler register 0x0 


Prescaler Value [7:0] Determine SDI clock (SDCLK) rate as above equation. 0x00 
Baud rate = PCLK / 2 / (Prescaler value + 1) 
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MMC/SD/SDIO HOST CONTROLLER 


SDI Command Argument Register (SDICARG) 


S3C2410A 
SDICARG 0x5A000008 SDI command argument register 0x0 


SDICCON 


Abort Command [12] Determine whether command type is for abort (for SDIO). 
(AbortCmd) 0=normal command, 1 = abort command (CMD12, CMD52) 


Command with Data [11] Determine whether command type is with data (for SDIO). 


(WithData) 0 = without data, 1 = with data 

LongRsp [10] Determine whether host receives a 136-bit long response or not. 
0 = short response, 1 = long response 

WaitRsp Determine whether host waits for a response or not. 
0 = no response, 1 = wait response 


Command Determine whether command operation starts or not. 
Start(CMST) 0 = command ready, 1 = command start 


Cmdlndex [7:0] _ | Command index with start 2-bit (8-bit) 
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SDI Command Status (SDICSTA) Register 


SDICSTA 0x5A000010 R/(W) | SDI command status register 


Response CRC CRC check failed when command response received. This flag is 
Fail(RspCrc) cleared by setting one to this bit. 
0 = not detect, 1 = crc fail 


Command Sent Command sent (not concerned with response). This flag is 
(CmdSent) cleared by setting one to this bit. 
0 = not detect, 1 = command end 


Command Time Out Command response timeout (64clk). This flag is cleared by 
(CmdTout) setting one to this bit. 
0 = not detect, 1 = timeout 


Response Receive Command response received. This flag is cleared by setting one 
End (RspFin) to this bit. 
0 = not detect, 1 = response end 


CMD line progress Command transfer in progress. 
On (CmdOn) = not detect, 1 = in progress 


Response index 6bit including start 2-bit (8-bit) 
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MMC/SD/SDIO HOST CONTROLLER 


SDI Response Register 0 (SDIRSPO) 


$3C2410A 
SDIRSPO 0x5A000014 | oR SDI response register 0 0x0 


[31:0] _| Card status[31:0\(short), card status[127:96|(Iong) 0x00000000 


SDI Response Register 1 (SDIRSP1) 


SDIRSP1 ox5A000018 | R | SDI response register 1 0x0 


[31:24] | CRC7 (with end bit, short), card status[95:88](long) 
[23:0] | Unused (short), card status[87:64](long) 


SDI Response Register 2 (SDIRSP2) 


SDIRSP2 0x5A00001C | oR | SDI response register 2 


[31:0] | Unused (short), card status[63:32](long) 0x00000000 


SDI Response Register 3 (SDIRSP3) 


SDIRSP3 0x5A000020 | oR | SDI response register 3 


[31:0] | Unused (short), card status[31:0](long) 0x00000000 


— 
rid 
©o 
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SDI Data / Busy Timer (SDIDTIMER) Register 


SDIDTIMER 0x5A000024 SDI data / busy timer register 0x2000 


[15:0] | Data / busy timeout period (0~65535 cycle) 0x2000 


SDI Block Size (SDIBSIZE) Register 


SDIBSIZE 0x5A000028 SDI block size register 0x0 


BlkSize [11:0] | Block size value (0~4095 byte). Do not care when stream mode 0x000 


NOTE: In Case of multi block, BIkSize should be divided by word(4byte).(BlkSize[1:0] = 00) 
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SDI Data Control (SDIDCON) Register 


SDIDCON 0x5A00002C SDI data control register 


SDIO Interrupt [21] Determine whether SDIO Interrupt period is 2 cycle or extend 
Period Type more cycle when last data block is transferred (for SDIO). 
(PrdType) 0 = exactly 2 cycle, 1 = more cycles(like single block) 


Transmit After [20] Determine when data transmit start after response receive or not. 
Response (TARSP) 0 = directly after DatMode set, 


1 = after response receive(assume DatMode sets to 2'b11) 


Receive After [19] Determine when data receive start after command sent or not. 
Command 0 = directly after DatMode set, 


(RACMD) 1 = after command sent (assume DatMode sets to 2'b10) 


Busy After [18] Determine when busy receive start after command sent or not. 
Command 0 = directly after DatMode set, 


(BACMD) 1 = after command sent (assume DatMode sets to 2'b01) 


Block mode [17] Data transfer mode. 
(BlkMode) O = stream data transfer, 1 = block data transfer 


Wide bus enable [16] Determine enable wide bus mode. 
(WideBus) 0 = standard bus mode(only SDIDAT[0] used), 


1 = wide bus mode(SDIDAT[3:0] used) 


DMA Enable [15] Enable DMA. 
(EnDMA) 0 = disable(polling), 1 = dma enable 
When DMA operation is completed, this bit should be disabled. 


Stop by force [14] Determine whether data transfer stop by force or not. 


(STOP) 


Data Transfer Mode | [13:12] | Determine the direction of data transfer. 
(DatMode) 00 = ready, 01 = only busy check start 
10 = data receive start, 11 = data transmit start 


BIkNum [11:0] | Block Number (0~4095). Do not care when stream mode. 


NOTES: 

1. If you want one of TARSP, RACMD and BACMD bits (SDIDCON[20:18]) to "1", you need to write on SDIDCON 
register head of on SDICCON register (always need for SDIO). 

2. When DMA operation is completed, DMA Enable[15] bit of SDIDCON register should be disabled. 


0 = normal, 1 = stop by force 
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SDI Data Remain Counter (SDIDCNT) Register 


SDIDCNT 0x5A000030 | oR | SDI data remain counter register 


BlkNumCnt [23:12] | Remaining block number 


BlkCnt [11:0] | Remaining data byte of 1 block 
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SDI Data Status (SDIDSTA) Register 


SDIDSTA 0x5A000034 R/(W) | SDI data status register 


Read Wait [10] Read wait request signal transmits to SD card. The request signal 
Request Occur R/W is stopped and this flag is cleared by setting one to this bit.(for 
(RWaitReq) SDIO) 

0 = not occur, 1 = Read wait request occur 


SDIO Interrupt [9] SDIO interrupt detects. This flag is cleared by setting one to this 
Detect (lOIntDet) R/W bit.(for SDIO) 


0 = not detect, 1 = SDIO interrupt detect 


FIFO Fail error [8] FIFO fail error when FIFO occurs overrun / underrun / misaligned 
(FFfail) R/W data saving. This flag is cleared by setting one to this bit. 


0 = not detect, 1 = FIFO fail 


CRC Status Fail [7] CRC Status error when data block sent (CRC check failed - 
(CrcSta) R/W returned from card). This flag is cleared by setting one to this bit. 


O = not detect, 1 = crc status fail ~~ 
Data Receive CRC [6] Data block received error (CRC check failed - calculated by host). 
Fail (DatCrc) R/W This flag is cleared by setting one to this bit. 

0 = not detect, 1 = receive crc fail 


0 = not detect, 1 = timeout 


Data Time Out [5] Data / Busy receive timeout. This flag is cleared by setting one to 
(DatTout) R/W _ | this bit. 


Data Transfer Finish [4] Data transfer completes (data counter is zero). This flag is cleared 
(DatFin) R/W by setting one to this bit. 


0 = not detect, 1 = data finish detect 


Busy Finish [3] Only busy check finish. This flag is cleared by setting one to this 
(BusyFin) R/W | bit. 
0 = not detect, 1 = busy finish detect 
Tx Data progress [1] Data transmit in progress. 
On (TxDatOn) R 0 = not active, 1 = data Tx in progress 


Rx Data Progress Data receive in progress. 
On (RxDatOn) 0 = not active, 1 = data Rx in progress 
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SDI FIFO Status (SDIFSTA) Register 


SDIFSTA 0x5A000038 | R | SDI FIFO status register 


FIFO available Indicate that FIFO data is available for transmission when 
Detect for Tx DatMode (SDIDCON{[12]) is data transmit mode. If DMA mode is 
(TFDET) enable, SD host requests DMA operation. 

0 = not detect (FIFO full), 1 = detect(0 < FIFO < 63) 


FIFO available [12] Indicate that FIFO data is available for reception when DatMode 
Detect for Rx (SDIDCON[12]) is data receive mode. If DMA mode is enable, SD 


(RFDET) host requests DMA operation. 
0 = not detect(FIFO empty), 1 =detect(1 < FIFO < 64) 


Tx FIFO Half Full [11] Set to 1 whenever Tx FIFO is less than 38byte. 
(TFHalf) 0 = 33 < Tx FIFO < 64, 1=0<Tx FIFO < 32 
Tx FIFO Empty [10] Set to 1 whenever Tx FIFO is empty. 

(TFEmpty) O= 1<TxFIFO < 64, 1 = Empty(Obyte) 


Rx FIFO Last Data Set to 1 whenever Rx FIFO has last data of all block. 


Ready (RFLast) O = not received yet, 1 = Last data ready 


Set to 1 whenever Rx FIFO is more than 31byte. 
(RFHalf) O= O<RXFIFO<31, 1 = 32 < Rx FIFO < 64 


FIFO Count [6:0] Number of data (byte) in FIFO 0000000 
(FFCNT) 


Rx FIFO Full Set to 1 whenever Rx FIFO is full. 
(RFFull) O= 0O<RX FIFO <63, 1 = Full(64byte) 


Rx FIFO Half Full [7] 
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SDI Data (SDIDAT) See 


SDIDAT = SDI data register 
Li/B, Bi/W) 
0x5A00003F (Bi/B) 


SDIDAT | Bit | Description 


Data Register [31:0] | This field contains the data to be transmitted or received over the | O0x00000000 
SDI channel. 


NOTES: 

1. (Li/W, Li/B): Access by Word/Byte unit when endian mode is Little 
2. (Bi/W): Access by Word unit when endian mode is Big 

3. (Bi/B) : Access by Byte unit when endian mode is Big 


19-14 ELECTRONICS 


$3C2410A MMC/SD/SDIO HOST CONTROLLER 


SDI Interrupt Mask (SDIIMSK) Register 


SDIIMSK 0x5A000040 SDI interrupt mask register 


| Bit | Description Initial Value 
RspCrc Interrupt [17] Response CRC error interrupt. 


Enable 0 = disable, 1 = interrupt enable 
CmdSent Interrupt [16] Command sent(without response) interrupt. 
Enable 0 = disable, 1 = interrupt enable 
CmdTout Interrupt [15] Command response timeout interrupt. 
Enable 0 = disable, 1 = interrupt enable 
RspEnd Interrupt [14] Command response received interrupt. 
Enable 0 = disable, 1 = interrupt enable 
RWaitReg Interrupt [13] Read wait request interrupt. 

Enable 0 = disable, 1 = interrupt enable 


lOlntDet Interrupt [12] SD host receives SDIO Interrupt from the card (for SDIO). 
Enable 0 = disable, 1 = interrupt enable 


FFfail Interrupt [11] FIFO fail error interrupt. 
Enable 0 = disable, 1 = interrupt enable 


CrcSta Interrupt [10] CRC status errors interrupt. 
Enable 0 = disable, 1 = interrupt enable 


Data CRC fail interrupt. 
0 = disable, 1 = interrupt enable 


DatCrc Interrupt 
Enable 


DatTout Interrupt 
Enable 


Data timeout interrupt. 
0 = disable, 1 = interrupt enable 


DatFin Interrupt 
Enable 


Data counter zero interrupt. 
0 = disable, 1 = interrupt enable 


Reserved 


Tx FIFO half interrupt. 
0 = disable, 1 = interrupt enable 


TFHalf Interrupt 
Enable 


TFEmpty Interrupt 
Enable 


RFLast Interrupt Rx FIFO has last data interrupt. 
Enable 0 = disable, 1 = interrupt enable 


RFFull Interrupt [ Rx FIFO full interrupt. 
Enable 0 = disable, 1 = interrupt enable 


RFHalf Interrupt Rx FIFO half interrupt. 
Enable 0 = disable, 1 = interrupt enable 


Tx FIFO empty interrupt. 
0 = disable, 1 = interrupt enable 


BusyFin Interrupt Busy checks complete interrupt. 
Enable 0 = disable, 1 = interrupt enable 


[7] 
[5] 
[4] 
[3] 
[2] 
1] 


f 
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SDI Data/Busy Timer Register 


SDI data/ busy timer register has 16-bit counter. In case of 25MHz operation, the countable maximum time is 2.6ms 
(40ns * 0x10000). But, some cards have very long access time (TAAC), their TAAC are up to 100ms. In this case the 
SDI generates data timeout error state. To solve this problem follow the below flow chart. 


Read 
(multil or single block) 


Is timeout occurs? 25MHz or 600KHZz ? Send stop command 


Send stop command if Change SDI clock to 
multi block eO0BHe 600KHz 


Change SDI clock to 
25MHz if 600KHz 


Return Return error 


Real-timeout error 
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liC-BUS INTERFACE 


OVERVIEW 


The S3C2410A RISC microprocessor can support a multi-master IIC-bus serial interface. A dedicated serial data line 
(SDA) and a serial clock line (SCL) carry information between bus masters and peripheral devices which are 
connected to the IIC-bus. The SDA and SCL lines are bi-directional. 


In multi-master IIC-bus mode, multiple S8C2410A RISC microprocessors can receive or transmit serial data to or 
from slave devices. The master S8C2410A can initiate and terminate a data transfer over the IIC-bus. The IIC-bus in 
the S8C2410A uses Standard bus arbitration procedure. 


To control multi-master IIC-bus operations, values must be written to the following registers: 


— Multi-master IIC-bus control register, IICCON 

— Multi-master IIC-bus control/status register, IICSTAT 
— Multi-master IIC-bus Tx/Rx data shift register, IICDS 
— Multi-master IIC-bus address register, IICADD 


When the IIC-bus is free, the SDA and SCL lines should be both at High level. A High-to-Low transition of SDA can 
initiate a Start condition. A Low-to-High transition of SDA can initiate a Stop condition while SCL remains steady at 
High Level. 


The Start and Stop conditions can always be generated by the master devices. A 7-bit address value in the first data 
byte, which is put onto the bus after the Start condition has been initiated, can determine the slave device which the 
bus master device has selected. The 8th bit determines the direction of the transfer (read or write). 


Every data byte put onto the SDA line should be eight bits in total. The bytes can be unlimitedly sent or received 
during the bus transfer operation. Data is always sent from most-significant bit (MSB) first, and every byte should be 
immediately followed by an acknowledge (ACK) bit. 
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Address Register 


IIC-Bus Control Logic 4 


IICCON IICSTAT 4-bit Prescaler Shift Register <+ > SDA 


Shift Register 
(IICDS) 


Data Bus 


Figure 20-1. IIC-Bus Block Diagram 


NOTE: IIC DATA HOLD TIME 
The IIC data hold time(tSDAH) is minimum Ons. 


(IIC data hold time is minimum Ons for standard/fast bus mode in IIC specification v2.1.) 
Please check the data hold time of your IIC device if it's 0 nS or not. 


The IIC controller supports only IIC bus device(standard/fast bus mode), not C bus device. 
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lIC-BUS INTERFACE 
The $3C2410A IIC-bus interface has four operation modes: 


— Master transmitter mode 
— Master receive mode 
— Slave transmitter mode 


— Slave receive mode 


Functional relationships among these operating modes are described below. 


START AND STOP CONDITIONS 


When the IIC-bus interface is inactive, it is usually in Slave mode. In other words, the interface should be in Slave 
mode before detecting a Start condition on the SDA line (a Start condition can be initiated with a High-to-Low 
transition of the SDA line while the clock signal of SCL is High). When the interface state is changed to Master 
mode, a data transfer on the SDA line can be initiated and SCL signal generated. 


A Start condition can transfer a one-byte serial data over the SDA line, and a Stop condition can terminate the data 
transfer. A Stop condition is a Low-to-High transition of the SDA line while SCL is High. Start and Stop conditions 
are always generated by the master. The IIC-bus gets busy when a Start condition is generated. A Stop condition 
will make the IIC-bus free. 


When a master initiates a Start condition, it should send a slave address to notify the slave device. One byte of 
address field consists of a 7-bit address and a 1-bit transfer direction indicator (showing write or read). 

If bit 8 is 0, it indicates a write operation (transmit operation); if bit 8 is 1, it indicates a request for data read (receive 
operation). 


The master will finish the transfer operation by transmitting a Stop condition. If the master wants to continue the data 
transmission to the bus, it should generate another Start condition as well as a slave address. In this way, the read- 
write operation can be performed in various formats. 


Start Stop 
Condition Condition 


Figure 20-2. Start and Stop Condition 
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DATA TRANSFER FORMAT 


Every byte placed on the SDA line should be eight bits in length. The bytes can be unlimitedly transmitted per 
transfer. The first byte following a Start condition should have the address field. The address field can be transmitted 
by the master when the IIC-bus is operating in Master mode. Each byte should be followed by an acknowledgement 
(ACK) bit. The MSB bit of the serial data and addresses are always sent first. 


Write Mode Format with 7-bit Addresses 


Slave Address 7bits DATA(1 Byte) Ag 


*O” 
(Write) Data Transferred 
(Data + Acknowledge) 


Write Mode Format with 10-bit Addresses 
Slave Address Slave Address 
ist 7 bits 2nd Byte cad fale | 


11110XX "0" 
(Write) Data Transferred 


(Data + Acknowledge) 


Read Mode Format with 7-bit Addresses 


s [Slave Address 7 bits DATA jal P| 


"4 " 
(Read) Data Transferred 
(Data + Acknowledge) 


Read Mode Format with 10-bit Addresses 
Slave Address Slave Address Slave Address 
1st 7 bits 2nd Byte 1st 7 Bits Bislie 4] | 


11110XX "4" "4" 
(Read) (Read) Data Transferred 


(Data + Acknowledge) 


NOTES: 
1. S : Start, rS: Repeat Start, P : Stop, A: Acknowledge 
2. (0: From Master to Slave, (J: From Slave to Master 


Figure 20-3. IIC-Bus Interface Data Format 
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Acknowledgement Acknowledgement 
Signal from Receiver Signal from Receiver 


I 
' 
' 
' 
! 
rf 


Byte Complete, Interrupt Clock Line Held Low by 
within Receiver receiver and/or transmitter 


Figure 20-4. Data Transfer on the IIC-Bus 


ACK SIGNAL TRANSMISSION 


To complete a one-byte transfer operation, the receiver should send an ACK bit to the transmitter. The ACK pulse 
should occur at the ninth clock of the SCL line. Eight clocks are required for the one-byte data transfer. The master 
should generate the clock pulse required to transmit the ACK bit. 


The transmitter should release the SDA line by making the SDA line High when the ACK clock pulse is received. The 
receiver should also drive the SDA line Low during the ACK clock pulse so that the SDA keeps Low during the High 
period of the ninth SCL pulse. 


The ACK bit transmit function can be enabled or disabled by software (IICSTAT). However, the ACK pulse on the 
ninth clock of SCL is required to complete the one-byte data transfer operation. 


Clock to Output 


Data Output by 
Transmitter 


Data Output by 
Receiver 


SCL from 
Master 


Condition 


Clock Pulse for Acknowledgment 


Figure 20-5. Acknowledge on the IIC-Bus 
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READ-WRITE OPERATION 


In Transmitter mode, when the data is transferred, the IIC-bus interface will wait until IIC-bus Data Shift (IICDS) 
register receives a new data. Before the new data is written into the register, the SCL line will be held low, and then 
released after it is written. The S3C2410A should hold the interrupt to identify the completion of current data transfer. 
After the CPU receives the interrupt request, it should write a new data into the IICDS register, again. 


In Receive mode, when a data is received, the IIC-bus interface will wait until ICDS register is read. Before the new 
data is read out, the SCL line will be held low and then released after it is read. The S8C2410A should hold the 
interrupt to identify the completion of the new data reception. After the CPU receives the interrupt request, it should 
read the data from the IICDS register. 


BUS ARBITRATION PROCEDURES 


Arbitration takes place on the SDA line to prevent the contention on the bus between two masters. If a master with a 
SDA High level detects the other master with a SDA active Low level, it will not initiate a data transfer because the 
current level on the bus does not correspond to its own. The arbitration procedure will be extended until the SDA line 
turns High. 


However, when the masters simultaneously lower the SDA line, each master should evaluate whether or not the 
mastership is allocated to itself. For the purpose of evaluation, each master should detect the address bits. While 
each master generates the slaver address, it should also detect the address bit on the SDA line because the SDA 
line is likely to get Low rather than to keep High. Assume that one master generates a Low as first address bit, while 
the other master is maintaining High. In this case, both masters will detect Low on the bus because the Low status 
is superior to the High status in power. When this happens, Low (as the first bit of address) generating master will 
get the mastership while High (as the first bit of address) generating master should withdraw the mastership. If both 
masters generate Low as the first bit of address, there should be an arbitration for the second address bit, again. 
This arbitration will continue to the end of last address bit. 


ABORT CONDITIONS 


If a slave receiver cannot acknowledge the confirmation of the slave address, it should hold the level of the SDA line 
High. In this case, the master should generate a Stop condition and to abort the transfer. 


If a master receiver is involved in the aborted transfer, it should signal the end of the slave transmit operation by 
canceling the generation of an ACK after the last data byte received from the slave. The slave transmitter should then 
release the SDA to allow a master to generate a Stop condition. 


CONFIGURING IIC-BUS 


To control the frequency of the serial clock (SCL), the 4-bit prescaler value can be programmed in the IICCON 
register. The IIC-bus interface address is stored in the IIC-bus address (IICADD) register. (By default, the IIC-bus 
interface address has an unknown value.) 
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FLOWCHARTS OF OPERATIONS IN EACH MODE 
The following steps must be executed before any IIC Tx/Rx operations. 


1) Write own slave address on IICADD register, if needed. 


2) Set IICCON register. 
a) Enable interrupt 
b) Define SCL period 


3) Set IICSTAT to enable Serial Output 


START 


Master Tx mode has been 
configured. 


Write slave address to 
ICDS. 


Write OxFO (M/T Start) to 
IICSTAT. 


Write OxDO (M/T Stop) to 
IICSTAT. 


Clear pending bit. 


Wait until the stop 
condition takes effect. 


Figure 20-6. Operations for Master/Transmitter Mode 
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START 


Master Rx mode has been 
configured. 


Write slave address to 
ICDS. 


Write 0xBO (M/R Start) to 
IICSTAT. 


The data of the IICDS (slave 
address) is transmitted. 


ACK period and then 
interrupt is pending. 


—— 


Read a new data from Write 0x90 (M/R Stop) to 
ICDS. IICSTAT. 


Clear pending bit to 


resume. Clear pending bit. 


Wait until the stop 
condition takes effect. 


SDA is shifted to IICDS. 


Figure 20-7. Operations for Master/Receiver Mode 
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START 


Slave Tx mode has been 
configured. 


IIC detects start signal. and, IICDS 
receives data. 


IC compares IICADD and IICDS (the 
received slave address). 


—— 


Y 
N 


The IIC address match 
interrupt is generated. 
Write data to IICDS. 
Clear pending bit to 
resume 
<a> 
The data of the IICDS is 
shifted to SDA. 


Interrupt is pending. 


Figure 20-8. Operations for Slave/Transmitter Mode 
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START 


Slave Rx mode has been 
configured. 


IIC detects start signal. and, IICDS 
receives data. 


IIC compares IICADD and IICDS 
(the received slave address). 


Y 
The IIC address match 
interrupt is generated 
Read data from IICDS 


Clear pending bit to 
resume. 


N 
SDA is shifted to IICDS 


Interrupt is pending. 


oe 


Figure 20-9. Operations for Slave/Receiver Mode 
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liC-BUS INTERFACE SPECIAL REGISTERS 


MULTI-MASTER IIC-BUS CONTROL (IICCON) REGISTER 


IICCON 0x54000000 lIC-Bus control register 


Acknowledge 
generation (note 1) 


Tx clock source 
selection 


Tx/Rx Interrupt [5] 
(note 5) 


Interrupt pending 
flag (note 2), (note 3) 


Transmit clock 
value (note 4) 


NOTES: 


1. 


2. 


3. 


IIC-bus acknowledge enable bit. 

0 =Disable, 1 = Enable 

In Tx mode, the IICSDA is free in the ack time. 
In Rx mode, the IICSDA is L in the ack time. 


Source clock of IIC-bus transmit clock prescaler selection bit. 
0 = IICCLK = fog, /16 


1 =lICCLK = fpgy, 512 


IC-Bus Tx/Rx interrupt enable/disable bit. 
0 =Disable, 1 = Enable 


IIC-bus Tx/Rx interrupt pending flag. This bit cannot be written to 
1. When this bit is read as 1, the IICSCL is tied to L and the IIC is 
stopped. To resume the operation, clear this bit as 0. 
0 = 1) No interrupt pending (when read). 

2) Clear pending condition & 

Resume the operation (when write). 

1 = 1) Interrupt is pending (when read) 

2) N/A (when write) 


IC-Bus transmit clock prescaler. 

lIC-Bus transmit clock frequency is determined by this 4-bit 
prescaler value, according to the following formula: 

Tx clock = IICCLK/(IICCON[3:0]+1). 


Undefined 


Interfacing with EEPROM, the ack generation may be disabled before reading the last data in order to generate the 
STOP condition in Rx mode. 
An |IC-bus interrupt occurs 1) when a 1-byte transmit or receive operation is completed, 2) when a general call ora 


slave address match occurs, or 3) if bus arbitration fails. 


pending bit. 


To adjust the setup time of IICSDA before IISSCL rising edge, IICDS has to be written before clearing the IIC interrupt 


IICCLK is determined by IICCON[6]. 


Tx clock can vary by SCL transition time. 
When IICCON{[6]=0, IICCON[3:0]=0x0 or 0x1 is not available. 


If the IICON[5]=0, IICON[4] does not operate correctly. 


So, It is recommended that you should set IICCON[5]=1, although you does not use the IIC interrupt. 
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MULTI-MASTER IIC-BUS CONTROL/STATUS (IICSTAT) REGISTER 


IICSTAT 0x54000004 lIC-Bus control/status register 0x0 


Mode selection lIC-bus master/slave Tx/Rx mode select bits. 
00: Slave receive mode 
01: Slave transmit mode 
10: Master receive mode 
11: Master transmit mode 


Busy signal status / IC-Bus busy signal status bit. 
START STOP 0 = read) Not busy (when read) 
condition write) STOP signal generation 
1 = read) Busy (when read) 
write) START signal generation. 
The data in IICDS will be transferred 
automatically just after the start signal. 


Serial output [4] IIC-bus data output enable/disable bit. 
0 = Disable Rx/Tx, 1 = Enable Rx/Tx 


Arbitration status [3] lIC-bus arbitration procedure status flag bit. 
flag 0 = Bus arbitration successful 
1 = Bus arbitration failed during serial I/O 


Address-as-slave [2] lIC-bus address-as-slave status flag bit. 
status flag 0 = Cleared when START/STOP condition was 
detected 
1 = Received slave address matches the address 
value in the IICADD 


Address zero status lIC-bus address zero status flag bit. 
flag 0 = Cleared when START/STOP condition was 
detected. 
1 = Received slave address is 00000000b. 


Last-received bit IIC-bus last-received bit status flag bit. 
status flag O = Last-received bit is 0 (ACK was received). 


1 = Last-received bit is 1 (ACK was not received). 
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MULTI-MASTER IIC-BUS ADDRESS (IICADD) REGISTER 


lICADD 0x54000008 lIC-Bus address register 


Slave address [7:0] 7-bit slave address, latched from the IIC-bus. 
When serial output enable = 0 in the IICSTAT, IICADD is write- 
enabled. The IICADD value can be read any time, regardless of 
the current serial output enable bit (IICSTAT) setting. 
Slave address = [7:1] 
Not mapped = [0] 


MULTI-MASTER IIC-BUS TRANSMIT/RECEIVE DATA SHIFT (IICDS) REGISTER 


ICDS 0x5400000C lIC-Bus transmit/receive data shift register 


Data shift [7:0] 8-bit data shift register for IIC-bus Tx/Rx operation. XXXXXXXX 
When serial output enable = 1 in the IICSTAT, IICDS is write- 
enabled. The IICDS value can be read any time, regardless of the 
current serial output enable bit (IICSTAT) setting. 
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NOTES 
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2 1 lIIS-BUS INTERFACE 


OVERVIEW 


Currently, many digital audio systems are attracting the consumers on the market, in the form of compact discs, 
digital audio tapes, digital sound processors, and digital TV sound. The S3C2410A Inter-IC Sound (IIS) bus interface 
can be used to implement a CODEC interface to an external 8/16-bit stereo audio CODEC IC for mini-disc and 
portable applications. The IIS bus interface supports both IIS bus data format and MSB-justified data format. The 
interface provides DMA transfer mode for FIFO access instead of an interrupt. It can transmit and receive data 
simultaneously as well as transmit or receive data alternatively at a time. 
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BLOCK DIAGRAM 


7 TXxFIFO | 
RxFIFO 


IPSR_A 
IPSR_B 


Figure 21-1. IIS-Bus Block Diagram 


FUNCTIONAL DESCRIPTIONS 


Bus interface, register bank, and state machine (BRFC): Bus interface logic and FIFO access are controlled by the 
state machine. 


5-bit dual prescaler (IPSR): One prescaler is used as the master clock generator of the IIS bus interface and the 
other is used as the external CODEC clock generator. 


64-byte FIFOs (TxFIFO and RxFIFO): In transmit data transfer, data are written to TxFIFO, and, in the receive data 
transfer, data are read from RxFIFO. 


Master IISCLK generator (SCLKG): In master mode, serial bit clock is generated from the master clock. 


Channel generator and state machine (CHNC): IISCLK and IISLRCK are generated and controlled by the channel 
state machine. 


16-bit shift register (SFTR): Parallel data is shifted to serial data output in the transmit mode, and serial data input is 
shifted to parallel data in the receive mode. 


TRANSMIT OR RECEIVE ONLY MODE 


Normal Transfer 


IIS control register has FIFO ready flag bits for transmit and receive FIFOs. When FIFO is ready to transmit data, the 
FIFO ready flag is set to '1' if transmit FIFO is not empty. 

If transmit FIFO is empty, FIFO ready flag is set to '0'. When receive FIFO is not full, the FIFO ready flag for receive 
FIFO is set to '1' ; it indicates that FIFO is ready to receive data. If receive FIFO is full, FIFO ready flag is set to ‘0’. 
These flags can determine the time that CPU is to write or read FIFOs. Serial data can be transmitted or received 
while the CPU is accessing transmit and receive FIFOs in this way. 
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DMA Transfer 


In this mode, transmit or receive FIFO is accessible by the DMA controller. DMA service request in transmit or 
receive mode is made by the FIFO ready flag automatically. 


Transmit and Receive Mode 


In this mode, IIS bus interface can transmit and receive data simultaneously. 


AUDIO SERIAL INTERFACE FORMAT 


lIS-BUS FORMAT 


The IIS bus has four lines including serial data input (IISDI), serial data output (IISDO), left/right channel select 
(IISLRCK), and serial bit clock (IISCLK); the device generating IISLRCK and IISCLK is the master. 


Serial data is transmitted in 2's complement with the MSB first. The MSB is transmitted first because the transmitter 
and receiver may have different word lengths. The transmitter does not have to know how many bits the receiver can 
handle, nor does the receiver need to know how many bits are being transmitted. 


When the system word length is greater than the transmitter word length, the word is truncated (least significant data 
bits are set to '0') for data transmission. If the receiver gets more bits than its word length, the bits after the LSB are 
ignored. On the other hand, if the receiver gets fewer bits than its word length, the missing bits are set to zero 
internally. And therefore, the MSB has a fixed position, whereas the position of the LSB depends on the word length. 
The transmitter sends the MSB of the next word at one clock period whenever the IISLRCK is changed. 


Serial data sent by the transmitter may be synchronized with either the trailing (HIGH to LOW) or the leading (LOW 
to HIGH) edge of the clock signal. However, the serial data must be latched into the receiver on the leading edge of 
the serial clock signal, and so there are some restrictions when transmitting data that is synchronized with the 
leading edge. 


The LR channel select line indicates the channel being transmitted. IISLRCK may be changed either on a trailing or 
leading edge of the serial clock, but it does not need to be symmetrical. In the slave, this signal is latched on the 
leading edge of the clock signal. The IISLRCK line changes one clock period before the MSB is transmitted. This 
allows the slave transmitter to derive synchronous timing of the serial data that will be set up for transmission. 
Furthermore, it enables the receiver to store the previous word and clear the input for the next word. 


MSB (LEFT) JUSTIFIED 
MSB / left justified bus format is the same as IIS bus format architecturally. Only, different from the IIS bus format, 


the MSB justified format realizes that the transmitter always sends the MSB of the next word whenever the IISLRCK 
is changed. 
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MSB-justified Format (N=8 or 16) 


Figure 21-2. IIS-Bus and MSB (Left)-justified Data Interface Formats 


SAMPLING FREQUENCY AND MASTER CLOCK 
Master clock frequency (PCLK) can be selected by sampling frequency as shown in Table 21-1. Because PCLK is 


made by IIS prescaler, the prescaler value and PCLK type (256 or 384fs) should be determined properly. Serial bit 
clock frequency type (16/32/48fs) can be selected by the serial bit per channel and PCLK as shown in Table 21-2. 


Table 21-1. CODEC clock (CODECLK = 256 or 384fs) 


IISLRCK 8.000 11.025 16.000 | 22.050 | 32.000 | 44.100 | 48.000 | 64.000 | 88.200 | 96.000 
(fs) kHz kHz kHz kHz kHz kHz kHz kHz kHz kHz 


256s 


ae SC‘“‘;SCSSCSOSCSCSCSCSCSCSCSC‘*r 
ae SOSOSOSSCSCSC“‘“CS*S*SCSC~*” 


(MHz) | 384fs 


21-4 ELECTRONICS 


$3C2410A IIS-BUS INTERFACE 


Table 21-2 Usable Serial Bit Clock Frequency (IISCLK = 16 or 32 or 48fs) 


Serial clock frequency (IISCLK) 


@CODECLK = 384fs 16fs, 32fs, 48fs 32fs, 48fs 


liS-BUS INTERFACE SPECIAL REGISTERS 


IIS CONTROL (IISCON) REGISTER 
IISCON 0x55000000 (Li/HW, Li/W, Bi/W) a IIS control register 0x100 
0x55000002 Bihan, 
Left/Right channel index 0 = Left 
(Read only) 1 = Right 
Transmit FIFO ready flag = empty 
(Read only) iz = not empty 
Receive FIFO ready flag = full 
a = not full 


(Read only) 
0 = Disable 


1 = Enable 


0 = Disable 
1 = Enable 


Transmit DMA service request 


Receive DMA service request 


Receive channel idle command In Idle state the IISLRCK is inactive (Pause Rx). 
0 = Not idle 


1 = Idle 


0 = Disable 
1 = Enable 


0 = Disable (stop) 
1 = Enable (start) 


IIS prescaler 


IIS interface 


Transmit channel idle command In Idle state the IISLRCK is inactive (Pause Tx). 
0 = Not idle 
1 = Idle 


NOTES: 

1. The IISCON register is accessible for each byte, halfword and word unit using STRB/STRH/STR and LDRB/LDRH/LDR 
instructions or char/short int/int type pointer in Little/Big endian mode. 

2. (Li/HW/W): Little/HalfWord/Word 
(Bi/HW/W): Big/HalfWord/Word 
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IIS MODE REGISTER (IISMOD) REGISTER 
IISMOD 0x55000004 (Li/W, Li/HW, Bi/W) aw | IIS mode register 
0x55000006 (Bi/HW) 


Master/slave mode select 0 = Master mode 
(IISLRCK and IISCLK are output mode). 
1 = Slave mode 
(IISLRCK and IISCLK are input mode). 


Transmit/receive mode select : 00 = No transfer 
01 = Receive mode 
10 = Transmit mode 
11 = Transmit and receive mode 


Active level of left/right channel [5] 0 = Low for left channel (High for right channel) 
1 = High for left channel (Low for right channel) 
Serial interface format = IIS compatible format 
i: = MSB (Left)-justified format 


Master clock frequency select 0 = 256fs 
1 = 384fs 
(fs: sampling frequency) 


Serial bit clock frequency select : 00 = 16fs 
01 = 32fs 
10 = 48fs 
11=N/A 


Serial data bit per channel 0 = 8-bit 
1 = 16-bit 


NOTES: 

1. The IISMOD register is accessible for each halfword and wordunit using STRH/STR and LDRH/LDR instructions or 
short int/int type pointer in Little/Big endian mode. 

2.  (Li/HW/W): Little/HalfWord/Word. 
(Bi/HW/W): Big/HalfWord/Word. 
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IIS PRESCALER (IISPSR) REGISTER 


IISPSR 0x55000008 (Li/HW, Li/W, Bi/W) a IIS prescaler register 
0x5500000A (Bi/HW) 


Prescaler control A : Data value: 0 ~ 31 
Note: Prescaler A makes the master clock that is used the 
internal block and division factor is N+1. 


Prescaler control B : Data value: 0 ~ 31 
Note: Prescaler B makes the master clock that is used the 
external block and division factor is N+1. 


NOTES: 

1. The IISPSR register is accessible for each byte, halfword and word unit using STRB/STRH/STR and LDRB/LDRH/LDR 
instructions or char/short int/int type pointer in Little/Big endian mode. 

2. (Li/HW/W) : Little/HalfWord/Word. 
(Bi/HW/W) : Big/HalfWord/Word. 
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IIS FIFO CONTROL (IISFCON) REGISTER 


IISFCON 0x5500000C (Li/HW, Li/W, Bi/W) ae IIS FIFO interface register 
0x5500000E (Bi/HW) 


Transmit FIFO access mode [15] 0 = Normal 
select 1 = DMA 


Receive FIFO access mode [14] 0 = Normal 
select 1 = DMA 
Transmit FIFO [13] |0=Disable 1 =Enable -—i— 
Receive FIFO [12] 0=Disable 1 = Enable 


Transmit FIFO data count [11:6] | Data count value = 0 ~ 32 — 
(Read only) 
Receive FIFO data count [5:0] Data count value = 0 ~ 32 000000 
(Read only) 


NOTES: 

1. The IISFCON register is accessible for each halfword and word unit using STRH/STR and LDRH/LDR instructions or 
short int/int type pointer in Little/Big endian mode. 

2. (Li/HW/W): Little/HalfWord/Word. 
(Bi/HW/W): Big/HalfWord/Word. 


IIS FIFO (IISFIFO) REGISTER 


IIS bus interface contains two 64-byte FIFO for the transmit and receive mode. Each FIFO has 16-width and 32-depth 
form, which allows the FIFO to handles data for each halfword unit regardless of valid data size. Transmit and receive 
FIFO access is performed through FIFO entry; the address of FENTRY is 0x55000010. 


IISFIFO 0x5500001 0(Li/HW) — IIS FIFO register 
0x5500001 2(Bi/HW) 


FENTRY [15:0] | Transmit/Receive data for IIS 0x0 


NOTES: 

1. The IISFIFO register is accessible for each halfword and word unit using STRH and LDRH instructions or short int type 
pointer in Little/Big endian mode. 

2. (Li/HW): Little/HalfWord. 
(Bi/HW): Big/HalfWord. 


21-8 ELEGTRONECS 


$3C2410A SPI INTERFACE 


SPI INTERFACE 


OVERVIEW 


The S3C2410A Serial Peripheral Interface (SPI) can interface the serial data transfer. The S3C2410A includes two 
SPI, each of which has two 8-bit shift registers for transmission and receiving, respectively. During an SPI transfer, 
data is simultaneously transmitted (shifted out serially) and received (shifted in serially). 8-bit serial data at a 
frequency is determined by its corresponding control register settings. If you only want to transmit, received data can 
be dummy. Otherwise, if you only want to receive, you should transmit dummy '1' data. 


There are 4 I/O pin signals associated with SPI transfers: the SCK (SPICLKO,1), the MISO (SPIMISOO,1) data line, 
the MOSI (SPIMOSIO,1) data line, and the active low /SS (nSS0,1) pin (input). 


FEATURES 


— SPI Protocol (ver. 2.11) compatible 
— 8-bit Shift Register for transmit 

— 8-bit Shift Register for receive 

— 8-bit Prescaler logic 


— Polling, Interrupt, and DMA transfer mode 
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Figure 22-1. SPI Block Diagram 
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SPI OPERATION 


Using the SPI interface, the S8C2410A can send/receive 8 —bit data simultaneously with an external device. A serial 
clock line is synchronized with the two data lines for shifting and sampling of the information. When the SPI is the 
master, transmission frequency can be controlled by setting the appropriate bit to SPPREn register. You can modify 
its frequency to adjust the baud rate data register value. When the SPI is a slave, other master supplies the clock. 
When the programmer writes byte data to SPTDATn register, SPI transmit/receive operation will start 
simultaneously. In some cases, nSS should be activated before writing byte data to SPTDATn. 

Programming Procedure 

When a byte data is written into the SPTDATn register, SPI starts to transmit if ENSCK and MSTR of SPCONn 
register are set. You can use a typical programming procedure to operate an SPI card. 

To program the SPI modules, follow these basic steps: 


1. Set Baud Rate Prescaler Register (SPPREn). 

Set SPCONn to configure properly the SPI module. 

Write data OxFF to SPTDATn 10 times in order to initialize MMC or SD card. 

Set a GPIO pin, which acts as nSS§, to low to activate the MMC or SD card. 

Tx data — Check the status of Transfer Ready flag (REDY = 1), and then write data to SPTDATn. 


Rx data(1): SPCONn's TAGD bit disable = normal mode 
— write OxFF to SPTDATn, then confirm REDY to set, and then read data from Read Buffer. 


7. Rx data(2): SPCONn's TAGD bit enable = Tx Auto Garbage Data mode 
— confirm REDY to set, and then read data from Read Buffer (then automatically start to transfer). 


8. Seta GPIO pin, which acts as nSS, to high, to deactivate MMC or SD card. 


oak woh 
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SPI Transfer Format 


The S3C2410A supports 4 different format to transfer the data. Figure 22-2 shows four waveforms for SPICLK.. 


CPOL = 0, CPHA = 0 (Format A) 
Mos! | (5) : : ) : : ; 
MISO 


* MSB of character just received 


CPOL = 0, CPHA = 1 (Format B) 
cycle [7 Te[s[*#]s]s]7 8] 
MOSsI } | ) ) ) ) ) ) ) 


MISO 
*LSB of previously transmitted character 


CPOL = 1, CPHA = 0 (Format A) 
oyel Tete Ts[s [7 [es] 
cok 9 LILI LU LEU Lu 
MOSI 


MISO 


* MSB of character just received 


CPOL = 1, CPHA = 1 (Format B) 

Cycle Pe 2s as en 7 | 
SPICLK | | : 
MOSI | ) ) ) ) ) } 


MISO 


*LSB of previously transmitted character 


Figure 22-2. SPI Transfer Format 
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Transmitting Procedure by DMA 


The SPI is configured as DMA mode. 

DMA is configured properly. 

The SPI requests DMA service. 

DMA transmits 1byte data to the SPI. 

The SPI transmits the data to card. 

Return to Step 3 until DMA count becomes 0. 


The SPI is configured as interrupt or polling mode with SMOD bits. 


Receiving Procedure by DMA 


1. 


oe DON Pa Fr wo ND 


The SPI is configured as DMA start with SMOD bits and setting TAGD bit. 
DMA is configured properly. 

The SPI receives 1byte data from card. 

The SPI requests DMA service. 

DMA receives the data from the SPI. 

Write data OxFF automatically to SPTDATn. 

Return to Step 4 until DMA count becomes 0. 

The SPI is configured as polling mode with SMOD bits and clearing TAGD bit. 
If SPSTAn's REDY flag is set, then read the last byte data. 


NOTE 


Total received data = DMA TC values + the last data in polling mode (Step 9). 
The first DMA received data is dummy and so the user can neglect it. 


SPI Slave Rx Mode with Format B 


If the SPI slave Rx mode is activated and SPI format is set to format B, then SPI operation will be failed: 


The READY signal, one of internal signals, becomes high before the SPI_CNT reaches 0. Therefore, in DMA mode, 
DATA_READ signal is generated before the last data is latched. 
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Guide 
1) DMA mode: This mode cannot be used at SPI slave Rx mode with format B. 


2) Polling mode: 
DATA_READ signal should be delayed by 1phase of SPICLK at SPI slave Rx mode with format B. 


3) Interrupt mode: 
DATA_READ signal should be delayed 1phase of SPICLK at SPI slave Rx mode with format B. 


SPI Data Receive Function Error (Slave/Receive/Format B Mode) 


i SPI_CNT Value 
7161514: 312:111 0% 
i} i} i} i} 1 i} 


SPICLK | f | | i 
*\ Data Latch 


A Data Read 


DATA_READ 
(Internal) 


i} ' | 
' ' ' 
READY (Internal) | | | 
' | 
' 
' ' 
\ | 
i} 
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SPI CONTROL REGISTER 


SPI INTERFACE 


SPCONO 0x59000000 SPI channel 0 control register 
SPCONT 0x59000020 SPI channel 1 control register 


SPI Mode Select (SMOD) Determine how and by what SPTDAT is read/written. 
00 = polling mode, 01 = interrupt mode 
10 = DMA mode, 11 = reserved 


SCK Enable (ENSCk) Determine whether you want SCK enable or not (for only 
master). 
0 = disable, 1 = enable 


Master/Slave Select Determine the desired mode (master or slave). 
(MSTR) 0 = slave, 1 = master 
NOTE: Inslave mode, there should be set up time for 
master to initiate Tx/Rx. 


Clock Polarity Select [2] Determine an active high or active low clock. 

(CPOL) 0 = active high, 1 = active low 

Clock Phase Select [1] Select one of two fundamentally different transfer formats. 
(CPHA) 0 = format A, 1 = format B 


Tx Auto Garbage Data Decide whether the receiving data only needs or not. 
mode enable (TAGD) 0 = normal mode, 1 = Tx auto garbage data mode 
NOTE: In normal mode, if you only want to receive data, 
you should transmit dummy OxFF data. 
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$3C2410A 


SPSTAO 0x59000004 | oR | SPI channel 0 status register 
SPSTAI ox59000024 | R — |SPlIchannel 1 status register 


2 


Data Collision Error Flag 
(DCOL) 


Multi Master Error Flag 
(MULF) 


Transfer Ready Flag 
(REDY) 


This flag is set if the SPTDATn is written or the SPRDATn is 
read while a transfer is in progress and cleared by reading 
the SPSTAn. 

0 = not detect, 1 = collision error detect 


This flag is set if the nSS signal goes to active low while the 
SPI is configured as a master, and SPPINn's ENMUL bit is 
multi master errors detect mode. MULF is cleared by 


reading SPSTAn. 
0 = not detect, 1 = multi master error detect 


This bit indicates that SPTDATn or SPRDATn is ready to 
transmit or receive. This flag is automatically cleared by 
writing data to SPTDATn. 

0 = not ready, 1 = data Tx/Rx ready 
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SPI PIN CONTROL REGISTER 


When the SPI system is enabled, the direction of pins, except nSS pin, is controlled by MSTR bit of SPCONn 
register. The direction of nSS pin is always input. 

When the SPI is a master, nSS pin is used to check multi-master error, provided the SPPIN's ENMUL bit is active, 
and another GPIO should be used to select a slave. 

If the SPI is configured as a slave, the nSS pin is used to select SPI as a slave by one master. 


SPPINO 0x59000008 SPI channel 0 pin control register 
SPPIN1 0x59000028 SPI channel 1 pin control register 


cc 


Multi Master error detect The /SS pin is used as an input to detect multi master error 
Enable (ENMUL) when the SPI system is a master. 

0 = disable (general purpose) 

1 = multi master error detect enable 


Master Out Keep (KEEP) Determine MOSI drive or release when 1byte transmit is 
completed (only master). 
0 = release, 1 = drive the previous level 


The SPIMISO (MISO) and SPIMOSI (MOSI) data pins are used for transmitting and receiving serial data. When the 
SPI is configured as a master, SPIMISO (MISO) is the master data input line, SPIMOSI (MOSI) is the master data 
output line, and SPICLK (SCK) is the clock output line. When the SPI becomes a slave, these pins perform reversed 
roles. In a multiple-master system, SPICLK (SCK) pins, SPIMOSI (MOSI) pins, and SPIMISO (MISO) pins are tied 
to configure a group respectively. 


A master SPI can experience a multi master error, when other SPI device working as a master selects the S8C2410 
SPI as a slave. When this error is detected, the following actions are taken immediately. But you must previously set 
SPPINn's ENMUL bit if you want to detect this error. 


1. The SPCONn's MSTR bit is forced to 0 to operate slave mode. 
2. The SPSTAn's MULF flag is set, and an SPI interrupt is generated. 
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SPI Baud Rate Prescaler Register 


FW 
SPPREO 0x5900000C SPI cannel 0 baud rate prescaler register 
SPPRE1 0x5900002C SPI cannel 1 baud rate prescaler register 


Prescaler Value [7:0] Determine SPI clock rate as above equation. 0x00 
Baud rate = PCLK / 2 / (Prescaler value + 1) 


NOTE: Baud rate should be less than 25 MHz. 


SPI Tx Data Register 


SPTDATO 0x59000010 SPI channel 0 Tx data register 
SPTDAT1 0x59000030 SPI channel 1 Tx data register 


Tx Data Register [7:0] This field contains the data to be transmitted over the SPI 
channel. 


SPI Rx Data Register 


RW 
SPRDATO 0x59000014 | oR | SPI channel 0 Rx data register 
SPRDAT1 0x59000034 | oR | SPI channel 1 Rx data register 


Rx Data Register [7:0] This field contains the data to be received over the SPI 
channel. 
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BUS PRIORITIES 


OVERVIEW 


The bus arbitration logic determines the priorities of bus masters. It supports a combination of rotation priority mode 
and fixed priority mode. 


BUS PRIORITY MAP 


The S3C2410A holds eleven bus masters including SDRAM refresh controller, LCD_DMA, DMA0O, DMA1, DMA2, 
DMA3, USB_HOST_DMA, EXT_BUS_MASTER,, Test interface controller (TIC), and ARM920T. The following list 
shows the priorities among these bus masters after a reset: 


— 


SDRAM refresh controller 
LCD_DMA 

DMAO 

DMAt1 

DMA2 

DMA3 

USB host DMA 

External bus master 

TIC 

0. ARM920T 


. Reserved 


Ss BP PN OP aA FP wo LD 


4 
4 


Among those bus masters, four DMAs operate under the rotation priority, while others run under the fixed priority. 
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2 ELECTRICAL DATA 


ABSOLUTE MAXIMUM RATINGS 


Table 24-1. Absolute Maximum Rating 


DC Supply Voltage 1.8V /2.0V Vpp 


| Vo | | Vooo | 3: 3V Vop 


DC Input Voltage a: 3.3V Input buffer 


RECOMMENDED OPERATING CONDITIONS 


Table 24-2. Recommended Operating Conditions 


[Parameter ‘(Symbol Rating @oowiz /asewra) | Unit 


DC Input Voltage 3.3V Input buffer 3.340.3 


3.3V Interface / 5V Tolerant 3.0 — 5.25 
input buffer 
DC Output Voltage 3.3V Output buffer | 3340.3 | 3+0.3 


Industrial -40 to 85 
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D.C. ELECTRICAL CHARACTERISTICS 


Table 24-3 and 24-4 define the DC electrical characteristics for the standard LVCMOS 1/O buffers. 


Table 24-3. Normal I/O PAD DC Electrical Characteristics 
(Vpp = 3.3V + 0.3V, Ta = -40 to 85 °C) 


[Shit ager, postve-gong treshow omos ||| 20 | v_| 
[Schmit wager, negawe-going tveshos [mos | oe || | v_| 


NOTES: 

1. Type B6 means 6mA output driver cell. 

2. Type B8 means 8mA output driver cell. 

3. Type B12 means 12mA output driver cells. 
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Table 24-4. USB DC Electrical Characteristics 


[-Symbor [Parameter | Condition ‘| _win | Max | Unit 
V 


Vi High level input voltage 


Vit Low level input voltage 


High level input current Vin = 3.3V 


Table 24-5. S3C2410A Power Supply Voltage and Current 


Max. Operating frequency (HCLK 
Max. Operating frequency (PCLK 
Typical normal mode power NOTE(S) 
(Total Vppi + Vppio) 


Typical idle mode power NOTE(S) 
(Total Vpp; + Vppio) 


Typical slow mode power NOTE(S) FCLK = 12MHz 
(Total Vopi + Vppio) Bus Rate = 1:1:1 


Maximum Power_OFF mode power Just running 32.768KHz oscillator 
NOTE(3) (for RTC), all other I/O static. 
Typical Power_OFF mode power NOTE(S) 


Maximum RTC power NOTE(S) X-tal = 32.768KHz for RTC 


Typical RTC power NOTE(3) VDDarc=1.8V 


NOTES: 

1. Playing matrix2.wmv on PPC2003. 

2. No threads ready to run on PPC2003. 
3. Room temperature specification 
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A.C. ELECTRICAL CHARACTERISTICS 


tXTALCYC 
)H]_ 


1/2 Vppb 1/2 Vpp 


NOTE: — The clock input from the Xripil pin. 


Figure 24-1. XTIpIl Clock Timing 


tEXTCYC 


¢ tEXTHIGH > 4 tEXTLOW > 


VIH 
1/2 Vbp 


NOTE: — The clock input from the EXTCLK pin. 


Figure 24-2. EXTCLK Clock Input Timing 


EXTCLK 


HCLK 
(internal) 


Figure 24-3. EXTCLK/HCLK in case that EXTCLK is used without the PLL 
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Figure 24-4. HCLK/CLKOUT/SCLK in case that EXTCLK is used 


nRESET 


Figure 24-5. Manual Reset Input Timing 
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Figure 24-6. Power-On Oscillation Setting Timing 
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Figure 24-7. Power_OFF Mode Return Oscillation Setting Timing 
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Figure 24-8. ROM/SRAM Burst READ Timing(l) 
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Figure 24-9. ROM/SRAM Burst READ Timing(Il) 
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Figure 24-10. External Bus Request in ROM/SRAM Cycle 
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Figure 24-11. ROM/SRAM READ Timing (I) 
(Tacs = 2,Tcos = 2, Tacc = 4, Tcoh = 2, Tcah = 2, PMC = 0, ST = 0) 
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Figure 24-12. ROM/SRAM READ Timing (Il) 
(Tacs = 2, Tcos = 2, Tacc = 4, Tcoh = 2, Tcah = 2, PMC = 0, ST = 1) 
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Figure 24-13. ROM/SRAM WRITE Timing (I) 
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Figure 24-18. Masked-ROM Consecutive READ Timing 
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Figure 24-19. SDRAM Single Burst READ Timing (Trp 
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Figure 24-20. External Bus Request in SDRAM Timing (Trp 
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Figure 24-21. SDRAM MRS Timing 
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Figure 24-22. SDRAM Single READ Timing(l) (Trp 
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Figure 24-23 SDRAM Single READ Timing(Il) (Trp 
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Figure 24-24. SDRAM Auto Refresh Timing (Trp 
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Figure 24-25. SDRAM Page Hit-Miss READ Timing (Trp 
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Figure 24-26. SDRAM Self Refresh Timing (Trp 
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Figure 24-27. SDRAM Single Write Timing (Trp 
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Figure 24-30. TFT LCD Controller Timing 
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Figure 24-34. SPI Interface Timing (CPHA = 1, CPOL = 1) 
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Figure 24-36. NAND Flash Timing 
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Table 24-6. Clock Timing Constants 
(Vppi=V pDalive =V DDiarm= 1-8V + 0.15 / 2.0 V 40.1 V, Ty = -40 to 85 °C, Vopyicop = 3.3V + 0.3V) 


Parameter ————————*| Symbol |_in_ | Typ | Max | Unit | 
CS 
eysalcocneuaceine ———[omacre] © | _- | | = 
External clock input frequency | tear | - | - | 66 | Mme | 
Eeralsbaratoeeime [ero | = | _- | - | = 
Eneralsoacpaion melnisewah | tomon | 7 | = | = | = 
Eseraiceeceneucmowray | tae | @ | - | * | = _ 
HCLK (internal) to CLKOUT ee 


External clock input high level pulse width Ee a 


Reset assert time after clock stabilization tREsw — or 
kon 


Pee OFF mode return oscillation setting time tosce —— — or 

EXTCLK 
The interval before CPU runs after nNRESET is trsTORUN XTIpll or 
released. EXTCLK 
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Table 24-7. ROM/SRAM Bus Timing Constants 
(Vppi=V pDalive =V DDiarm= 1-8V + 0.15 / 2.0 V 40.1 V, Ty = -40 to 85 °C, Vppyop = 3.3V + 0.3V) 


Table 24-8. Memory Interface Timing Constants (3.3V) 
(Vppi =V Dbalive = pDiarm= 1-8V + 0.15 / 2.0 V+0.1 V, Ty = -40 to 85 °C, Vppycp = 3.3V + 0.3V) 


tsrp 


: 


Sona wieetedeey | tone | | 
soRaesdanseimine | tes | * | = | 
sorairesoamregime tem [8 [= 
ES 
soma Geckerte aay | toms | |= SR 
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Table 24-9. External Bus Request Timing Constants 
(Vpp = 1.8V £0.15 / 2.0 V 40.1 V, Ta = -40 to 85 °C, Veyz = 3.3V + 0.3V) 


Table 24-10. DMA Controller Module Signal Timing Constants 
(Vpp = 1.8V £0.15 / 2.0 V + 0.1 V, Ta = -40 to 85 °C, Vey_ = 3.3V + 0.3V) 
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Table 24-11. TFT LCD Controller Module Signal Timing Constants 
(Vpp = 1.8V £0.15 / 2.0 V 40.1 V, Ta = -40 to 85 °C, Vey_ = 3.3V + 0.3V) 


| Parameter |= Symbol | ——sMin_—_—s| Typ | Max | Units 
[Vertical syne pulsewidth | Tuspw | vsPW+1 | - | - | Phoikirotet) | 
eres beckporch delay | Ts | verot | — | — [Pro 
Neral font pore eay | twos | verovn [ — | - | Pham | 
oikvsewan ek 
[VoUKpuso wah nigh | ean [08] - [| - [| rm | 
[VouXpuse wathiow | twa | 08 | - | - | vem | 
syne seup te VOLK Taig ogo | Teweup | 08 | - | - | Prem | 
[VOEN setup to VOLK tang age | Taeassoup | 08 | — | - | Pek | 
VD setup to VCLK falling edge Tvdecsetup | 05 | - | - | Pvclk 

VD hold from VCLK falling edge | Tvdzchod | 05 | - | - | Pvclk 

[LEND fod fon VOUK rag ogo | twasto |] - | - [= 
[VSYNG setup 0 HSYNG fang age | “Teoup | ngewet | — | - | Prok —_| 


VSYNC hold from HSYNC falling edge Tf2hhold HBPD + HFPD + Pvclk 
HOZVAL +3 


NOTES: 
1. HSYNC period 
2. VCLK period 


Table 24-12. IIS Controller Module Signal Timing Constants 
(Vpp = 1.8V £0.15 / 2.0 V 40.1 V, Ta = -40 to 85 °C, Vey_ = 3.3V + 0.3V) 


1 


CODEC clock frequency fcoDEC 1/16 fis. 
BLOCK 


A 
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Table 24-13. IIC BUS Controller Module Signal Timing 
(Vpp = 1.8V £0.15 / 2.0 V + 0.1 V, Ta = -40 to 85 °C, Veyz = 3.3V + 0.3V) 


std. 100 kHz 
fast 400 


std. 4.0 
fast 0.6 


std. - fast 


std. 4.0 
fast 0.6 


NOTES: Std. means Standard Mode and fast means Fast Mode. 

1. The IIC data hold time(tSDAH) is minimum Ons. 
(IIC data hold time is minimum Ons for standard/fast bus mode in IIC specification v2.1.) 
Please check the data hold time of your IIC device if it's 0 nS or not. 

2. The llC controller supports only IIC bus device(standard/fast bus mode), not C bus device. 


Table 24-14. SD/MMC Interface Transmit/Receive Timing Constants 
(Vpp = 1.8V £0.15 / 2.0 V 40.1 V, Ta = -40 to 85 °C, Veyz = 3.3V + 0.3V) 
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Table 24-15. SPI Interface Transmit/Receive Timing Constants 
(Vpp = 1.8V + 0.15 / 2.0 V 40.1 V, Ta = -40 to 85 °C, Vey_ = 3.3V + 0.3V) 


Parameter 


SPI MISO Master Input Hold time 


Table 24-16. USB Electrical Specifications 
(Vpp = 1.8V + 0.15 / 2.0 V+0.1 V, Ty = -40 to 85 °C, Veyz = 3.38V + 0.3V) 


Leakage Current 

Hi-Z state Input Leakage 
Input Levels 

Differential Input Sensitivity 


RL of 1.5Kohm to 3.6V Vv 
Static Output High RL of 15Kohm to GND | 28 | 36 | | 


Capacitance 
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Table 24-17. USB Full Speed Output Buffer Electrical Characteristics 
(Vpp = 1.8V £0.15 / 2.0 V + 0.1 V, Ta = -40 to 85 °C, Veyz = 3.3V + 0.3V) 


Parameter | Symbol_| Condition | Min | Max | Unit _| 
Driver Characteristics 


Driver Characteristics 


Transition Time 
Rise Time CL = 50pF 4.0 2.0 
Fall Time CL = 50pF 4.0 2.0 


Rise/Fall Time Matching TREM (TR/ TF) Ls 


Output Signal Crossover VCRS F 2.0 
Voltage 


Drive Output Resistance ZDRV Steady state drive 


Table 24-18. USB Low Speed Output Buffer Electrical Characteristics 
(Vpp = 1.8V £0.15 /2.0 V+0.1 V, Ty = -40 to 85 °C, Veyz = 3.3V + 0.3V) 


Parameter | Symbol_| Condition | Min | Max | Unit _| 


Driver Characteristics 


Transition Time 

Rising Time CL = 50pF 75 ns 
CL = 350pF 300 

Falling Time CL = 50pF 75 
CL = 350pF 300 


Rise/Fall Time Matching TRFM (TR/TF) | go | i120 | lm 


Output Signal Crossover VCRS 1.3 2.0 V 
Voltage 
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Table 24-19. NAND Flash Interface Timing Constants 
(Vppi=V DDalive = DDiarm= 1-8V + 0.15 / 2.0 V 40.1 V, Ty = -40 to 85 °C, Vppig = 3.3V + 0.3V) 
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Figure 25-1. 272-FBGA-1414 Package Dimension 1 (Top View) 
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Figure 25-2. 272-FBGA-1414 Package Dimension 2 (Bottom View) 


The recommended land open size is 390 — 410 um (0.39 — 0.41mm) diameter. 


25-2 ELECTRONICS 


ARM920T PROCESSOR INTRODUCTION 


Appendix 1 


ARM920T INTRODUCTION 


ABUOT THE INTRODUCTION 


The ARM920T is a member of the ARM9TDMI family of general-purpose microprocessors, which includes: 


— ARMS9TDMI (ARM9TDMI core) 
— ARM940T (ARM9TDMI core plus cache and protection unit) 
— ARM920T (ARM9YTDMI core plus cache and MMU). 


The ARM9TDMI processor core is a Harvard architecture device implemented using a five-stage pipeline consisting of 
fetch, decode, execute, memory and write stages, and can be provided as a stand-alone core which can be 
embedded into more complex devices. The stand-alone core has a simple bus interface that allows users to design 
their own caches/memory systems around it. 


The ARM9TDMI family of microprocessors supports both the 32-bit ARM and 16-bit Thumb instruction sets, allowing 
the user to trade off between high performance and high code density. 


The ARM920T is a Harvard cache architecture processor which is targeted at multiprogrammer applications where 
full memory management, high performance, and low power are all-important. The separate instruction and data 
caches in this design are 16KB each in size, with an 8-word line length. The ARM920T implements an enhanced 
ARM Architecture V4 MMU to provide translation and access permission checks for instruction and data addresses. 


The ARM920T supports the ARM debug architecture and includes logic to assist in both hardware and software 
debug. The ARM920T also includes support for coprocessors, exporting the instruction and data buses along with 
simple handshaking signals. 


The ARM920T interface to the rest of the system is via unified address and data buses. This interface is compatible 
with the Advanced Microcontroller Bus Architecture (AMBA) bus scheme, either as a fully compliant AMBA bus 
master, or as a slave for production test. The ARM920T also has a TrackingICE mode which allows an approach 
similar to a conventional ICE mode of operation. 
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Shows the functional block diagram of the ARM920T 
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Figure 1-1. ARM920T Functional Block Diagram 
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PROGRAMMER'S MODEL 


ABOUT THE PROGRAMMER'S MODEL 


ARM920T incorporates the ARM9TDMI integer core, which implements the ARMv4T architecture. It executes the 
ARM and Thumb instruction sets, and includes Embedded ICE JTAG software debug features. 


The programmer's model of the ARM920T consists of the programmer's model of the ARM9TDMI with the following 
additions and modifications: 


The ARM920T incorporates two coprocessors: 


— CP14, which allows software access to the debug communications channel. The registers defined in 
CP14 are accessible with MCR and MRC instructions. 


— The system control coprocessor (CP15), which provides additional registers that are used to configure 
and control the caches, MMU, protection system, the clocking mode and other system options of the 
ARM920T, such as big or little-endian operation. The registers defined in CP15 are accessible with MCR 
and MRC instructions. These are described in CP15 register map summary on page 2-4. 


The ARM920T also features an external coprocessor interface which allows the attachment of a closely coupled 
coprocessor on the same chip, for example, a floating point unit. Registers and operations provided by any 
coprocessors attached to the external coprocessor interface will be accessible with appropriate coprocessor 
instructions. 


Memory accesses for instruction fetches and data loads and stores may be cached or buffered. Cache and write 
buffer configuration and operation is described in detail in following chapters. 


The MMU page tables which reside in main memory describe the virtual to physical address mapping, access 
permissions, and cache and write buffer configuration. These are created by the operating system software and 
accessed automatically by the ARM920T MMU hardware whenever an access causes a TLB miss. 


The ARM920T has a Trace Interface Port which allows the use of Trace hardware and tools for real-time tracing 
of instructions and data. 
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ABOUT THE ARM9STDMI PROGRAMMER'S MODEL 


The ARM9TDMI processor core implements ARM v4T architecture, and so executes the ARM 32-bit instruction set 
and the compressed Thumb 16-bit instruction set. The programmer's model is fully described in the ARM 
Architecture Reference Manual. The ARM9TDMI Technical Reference Manual gives implementation details including 
instruction execution cycle times. 


The ARM V4T architecture specifies a small number of implementation options. The options selected in the 
ARM9TDMI implementation are listed in Table 2-1. For comparison, the options selected for the ARM7TDMI 
implementation are also shown 


Table 2-1. ARM9TDMI Implementation Option 


Processor core ARM architecture Data abort model Value stored by direct 
STR, STRT, STM of PC 


| = ARM7TDMI Base updated Address of Inst + 12 


The ARM9TDMI is code-compatible with the ARM7TDMI, with two exceptions: 


e The ARMSTDMI implements the base restored data abort model, which significantly simplifies the software data 
abort handler. 


e The ARMYTDMI fully implements the instruction set extension spaces added to the ARM (32-bit) instruction set 
in architecture v4 and v4T. 


These differences are explained in more detail below. 


DATA ABORT MODEL 
The base restored data abort model differs from the base updated data abort model implemented by ARM7TDMI. 


The difference in the data abort model affects only a very small section of operating system code, the data abort 
handler. It does not affect user code. With the base restored data abort model, when a data abort exception occurs 
during the execution of a memory access instruction, the base register is always restored by the processor hardware 
to the value the register contained before the instruction was executed. This removes the need for the data abort 
handler to unwind any base register update which may have been specified by the aborted instruction. 
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INSTRUCTION SET EXTENSION SPACES 


All ARM processors implement the undefined instruction space as one of the entry mechanisms for the undefined 
instruction exception. That is, ARM instructions with opcode[27:25] = 0b011 and opcode[4] = 1 are undefined on all 
ARM processors including the ARM9TDMI and ARM7TDMI. 


ARM architecture v4 and v4T also introduced a number of instruction set extension spaces to the ARM instruction 
set. These are: 

e arithmetic instruction extension space 

¢ control instruction extension space 

* coprocessor instruction extension space 


e load/store instruction extension space. 


Instructions in these spaces are undefined (they cause an undefined instruction exception). The ARM9TDMI fully 
implements all the instruction set extension spaces defined in ARM architecture v4T as undefined instructions, 
allowing emulation of future instruction set additions. 


The system control coprocessor (CP15) allows configuration and control of the caches, MMU, protection system and 
clocking mode of the ARM920T. 


The ARM920T coprocessor 15 registers are described under the following sections: 


e Accessing CP15 registers on page 2-5 

e Register 0: ID code register on page 2-7 

e Register 0: Cache type register on page 2-8 

e Register 1: Control register on page 2-10 

e Register 2: Translation table base (TTB) register on page 2-12 
e Register 3: Domain access control register on page 2-13 
e Register 4: Reserved on page 2-14 

e Register 5: Fault status registers on page 2-14 

e Register 6: Fault address register on page 2-15 

e Register 7: Cache operations on page 2-15 

e Register 8: TLB operations on page 2-18 

e Register 9: Cache lock down register on page 2-19 

e Register 10: TLB lock down register on page 2-21 

e Registers 11 -12 & 14: Reserved on page 2-22 

e Register 13: Process ID on page 2-22 

e Addresses in ARM920T on page 2-6 


e Register 15: Test configuration register on page 2-24. 
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CP15 REGISTER MAP SUMMARY 


CP15 defines 16 registers. The register map for CP15 is shown in Table 2-2 


Table 2-2. CP15 Register Map 


Ds [Fatt @SSCS~*d estas 
[5 rautaiess ——SSSCS~*~*~i ees 
[Yee ——SSC*i Beaton 
[8 [act okcown@—~SCSCSC*S*~ra chown 


NOTES: 

1. Register location 0 provides access to more than one register. The register accessed depends upon the value of the 
opcode_2 field. See the register description for details. 

2. Separate registers for instruction and data. See the register description for details. 
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ACCESSING CP15 REGISTERS 


Throughout this section the following terms and abbreviations are used. 


Table 2-3. CP15 Abbreviations 


Unpredictable For reads, the data returned when reading from this location is 
unpredictable; it could have any value. 


For writes, writing to this location will cause unpredictable behavior, or 
an unpredictable change in device configuration. 


Should be zero When writing to this location, all bits of this field should be 0. 


In all cases, reading from, or writing any data values to any CP15 registers, including those fields specified as 
unpredictable or should be zero, will not cause any permanent damage. 


All CP15 register bits that are defined and contain state, are set to zero by BnRES except V-Bit in register 1, which 
takes the value of macrocell input VINITHI when BnRES is asserted. 


CP15 registers can only be accessed with MRC and MCR instructions in a privileged mode. The instruction bit 
pattern of the MCR and MRC instructions is shown in Figure 2-1. The assembler for these instructions is 


MCR/MRC {cong} P15,opcode_1,Rd,CRn,CRm,opcode_2 


28 27 26 25 24 23.21 2019 1615 1211109 8 7 5 4 3 


PN 


Figure 2-1. CP15 MRC and MCR Bit Pattern 


Instructions CDP, LDC and STC, along with unprivileged MRC and MCR instructions to CP15 will cause the 
undefined instruction trap to be taken. The CRn field of MRC and MCR instructions specifies the coprocessor register 
to access. The CRm field and opcode_2 field are used to specify a particular action when addressing registers. 


Attempting to read from a non-readable register, or writing to a non-writable register will cause unpredictable results. 


The opcode_1, opcode_2 and CRm fields should be zero, except when the values specified are used to select the 
desired operations, in all instructions which access CP15. Using other values will result in unpredictable behavior. 


ELECTRONICS 2-5 


PROGRAMMER'S MODEL ARM920T PROCESSOR 


Addresses in ARM920T 
Three distinct types of address exist in an ARM920T system: 


e virtual address (VA) 
e modified virtual address (MVA) 
e physical address (PA). 


Below is an example of the address manipulation when the ARM9TDMI requests an instruction. 


1) The VA of the instruction (IVA) is issued by the ARM9TDMI. 


2) This is translated by the ProcID to the instruction MVA (IMVA). It is the IMVA that the instruction cache and 
MMU see. 


3) If the protection check carried out by the IMMU on the IMVA does not abort and the IMVA tag is in the 
instruction cache the instruction data is returned to the ARM9TDMI. 


4) If the instruction cache misses (the IMVA tag is not in the instruction cache) then the IMMU performs a 
translation to produce the instruction PA (IPA). This address is given to the AMBA bus interface to perform an 
external access 


Table 2-4. Address Types in ARM920 
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REGISTER 0: ID CODE REGISTER 
This is a read-only register which returns a 32-bit device ID code. 


The ID code register is accessed by reading CP15 register 0 with the opcode_2 field set to any value other than 1 
(the CRm field should be zero when reading). For example: 


MRC p15,0,Rd,c0,c0,0; returns ID register 


The contents of the ID code are shown in Table 2-5. 


Table 2-5. Register 0: ID Code 


23:20 Specification revision 


19:16 Architecture version (4T) 
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REGISTER 0: CACHE TYPE REGISTER 


This is a read-only register which contains information about the size and architecture of the caches, allowing 
operating systems to establish how to perform such operations as cache cleaning and lockdown. Future ARM 
cached processors will contain this register, allowing RTOS vendors to produce future-proof versions of their 
operating systems. 


The cache type register is accessed by reading CP15 register 0 with the opcode_2 field set to 1. For example: 
MRC p15,0,Rd,c0,c0,1; returns cache details 


The format of the register is shown in Table 2-6. 


Table 2-6. Cache Type Register Format 


[Rewiserats—[—SCS~C*ameton—SCSCSC*~irtC“‘“‘CS*C*‘SO™OCSCC*d 
le 
Se 


a 
Se 
ee 
eS 


Bits [28:25] indicate which major cache class the implementation falls into. Ox6 means that the cache provides: 


e Cache-clean-step operation 
e Cache-flush-step operation 


e Lock down facilities 
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Bits [20:18] give the data cache size. Bits [8:6] give the instruction cache size. 
Table 2-7 on page 2-9 shows the meaning of values used for cache size encoding. 


Table 2-7. Cache Size Encoding 


a 


KB 
Ke 


Bits [17:15] give the data cache associativity. Bits [5:3] give the instruction cache associativity. Table 2-8 on 
page 2-9 shows the meaning of values used for cache associativity encoding. 


Table 2-8. Cache associativity encoding 


[mo *SSSC«Ct aed 


ee 


16 
z 


Bits [13:12] give the data cache line length. Bits [1:0] give the instruction cache line length. 
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Table 2-9 shows the meaning of values used for line length encoding 


Table 2-9. Line Length Encoding 


Bits [13:12]/Bits [1:0] Words Per Line 
a 2 


REGISTER 1: CONTROL REGISTER 


This register contains the control bits of the ARM920T. All reserved bits should either be written with zero or one, as 
indicated, or written using read-modify-write. The reserved bits have an unpredictable value when read. To read and 
write this register: 


MRC p15, 0, Rd, c1, cO, 0; read control register 
MCR p15, 0, Rd, c1, c0, 0; write control register 


All defined control bits are set to zero on reset except the V-Bit which is set to zero at reset if the VINITHI pin is 
LOW, or one if the VINITHI pin is HIGH. The functions of the control bits are shown in Table 2-10. 
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Table 2-10. Control Register 1-bit Functions 


Asynchronous clock select See Table 2-11 on page 2-11. 
notFastBus select See Table 2-11 on page 2-11. 


Reserved Read = Unpredictable 
Write = Should be zero 
Round robin replacement 0 = Random replacement 
1 = Round robin replacement 
13 V bit Base location of exception 0 = Low addresses = 0x0000 0000 
registers 1 = High addresses = OxFFFF 0000 
Instruction cache enable 0 = Instruction cache disabled 
1 = Instruction cache enabled 
11:10 Reserved Read = 00 
Write = 00 


14 


ROM protection This bit modifies the MMU protection system. 
See Table 3-6 on page 3-20 

S bit System protection This bit modifies the MMU protection system. 
See Table 3-6 on page 3-20 


Big-endian/little-endian 0 = Little-endian operation 
1 = Big-endian operation 


Reserved Read = 1111 
Write = 1111 
C bit Data cache enable 0 = Data cache disabled 
1 = Data cache enabled 
A bit Alignment fault enable Data address alignment fault checing. 
0 = Fault checking disabled 
1 = Fault checking enabled 
MMU enable 0 = MMU disabled 
1 = MMU enabled 


Register 1 bits 31:30 select the clocking mode of the ARM920T, as shown in Table 2-11. 


12 
7 
6:3 
2 
1 


Table 2-11. Clocking Modes 


Clocking Mode 


Reseed 
rr er i 
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Enabling the MMU 


Care must be taken with the address mapping of the code sequence used to enable the MMU, see Enabling the 
MMU on page 3-25. 


See Instruction cache enable/disable on page 4-3 and Data cache and write buffer enable/disable on page 4-6 for 
restrictions and effects of having caches enabled with the MMU disabled 
REGISTER 2: TRANSLATION TABLE BASE (TTB) REGISTER 


This is the translation table base register, for the currently active first level translation table. The contents of register 
2 are shown in Table 2-12. 


Table 2-12. Register 2: Translation Table Base 


31:14 Pointer to first level translation table base. 
Read/write 


Reserved 
Read = Unpredictable 
Write = Should be zero 


Reading from register 2 returns the pointer to the currently active first level translation table in bits[31:14]. Writing to 
register 2 updates the pointer to the first level translation table from the value in bits[31:14] of the written value. 


Bits[13:0] should be zero when written, and are unpredictable when read. 
The following instructions can be used to access the TTB: 


MRC p15, 0, Rd, c2, c0, 0; read TTB register 
MCR p15, 0, Rd, c2, cO, 0; write TTB register 
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REGISTER 3: DOMAIN ACCESS CONTROL REGISTER 


Register 3 is the read/write domain access control register consisting of sixteen 2-bit fields. Each of these 2-bit fields 
defines the access permissions for the domains shown in Table 2-13. 


Table 2-13. Register 3: Domain Access Control 


[Reaisterts | Comain 
= 
= 
[eid 
a 
= 


The encoding of the two bit domain access permission field is given in Table 3-5 on page 3-19. The following 
instructions can be used to access the domain access control register: 


MRC p15, 0, Rd, c3, cO0, 0; read domain 15:0 access permissions 
MCR p15, 0, Rd, c3, c0, 0; write domain 15:0 access permissions 
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REGISTER 4: RESERVED 


Accessing (reading or writing) this register will cause unpredictable behavior. 


REGISTER 5: FAULT STATUS REGISTERS 


Register 5 is the fault status register (FSR). The FSR contains the source of the last data fault, indicating the domain 
and type of access being attempted when the data abort occurred. 


Table 2-14. Fault Status Register 


UNP when read/SBZ for write. 
| = 8 ~~] O when read/SBZ for write. 


Domain being accessed when fault occurred (D15-D0). 


The fault type encoding is shown in Fault address and fault status registers on page 3-18. 


The data FSR is defined in ARM architecture v4T. Additionally, a pipelined prefetch FSR is available, for debug 
purposes only. The pipeline matches that of the ARM9TDMI. 


The following instructions can be used to access the data and prefetch FSR: 
MRC p15, 0, Rd, c5, cO, 0 ;read data FSR value 

MCR p15, 0, Rd, c5, cO, 0 ;write data FSR value 

MRC p15, 0, Rd, c5, c0, 1 ;read prefetch FSR value 

MCR p15, 0, Rd, c5, cO, 1 ;write prefetch FSR value 


The ability to write to the FSR is useful for a debugger to restore the value of the FSR. The register should be written 
using the read-modify-write method. Bits[31:8] should be zero. 
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REGISTER 6: FAULT ADDRESS REGISTER 


Register 6 is the fault address register (FAR) which contains the modified virtual address of the access being 
attempted when the last fault occurred. The FAR is only updated for data faults, not for prefetch faults. 
(The address for a prefetch fault can be found in R14.) 


The following instructions can be used to access the FAR: 


MRC p15, 0, Rad, c6, cO, 0 ;read FAR data 
MCR p15, 0, Rd, c6, cO, 0 ;write FAR data 


The ability to write to the FAR is intended for a debugger to restore a previous state. 


REGISTER 7: CACHE OPERATIONS 
Register 7 is a write-only register used to manage the instruction and data caches, ICache and DCache. 


The cache operations provided by register 7 are described in Table 2-15. 


Table 2-15. Function Descriptions Register 7 


Function | scription 


Invalidate cache Invalidates all cache data, including any dirty data (note). 
Use with caution. 


Invalidate single entry using Invalidates a single cache line, discarding any dirty data (note). 


modified virtual address Use with caution. 


Clean D single entry using either | Writes the specified cache line to main memory if the line is marked valid and 
index or modified virtual address _| dirty and marks the line as not dirty (note). 
The valid bit is unchanged. 


Clean and Invalidate D entry using | Writes the specified cache line to main memory if the line is marked valid and 
either index or modified virtual dirty (note). 
address The line is marked not valid. 


Prefetch cache line Performs an ICache lookup of the specified modified virtual address. 
If the cache misses, and the region is cacheable, a linefill will be performed. 


NOTE: Dirty data is data that has been modified in the cache but not yet written to main memory. 
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The function of each cache operation is selected by the opcode_2 and CRm fields in the MCR instruction used to 
write CP15 register 7. Writing other opcode_2 or CRm values is unpredictable. 


Reading from CP15 register 7 is unpredictable. 


Table 2-16 on page 2-16 shows instructions that can be used to perform cache operations with register 7 


Table 2-16. Cache Operations Register 7 


Function | ata | instruction 
Invalidate ICache SBZ 
Invalidate ICache single entry (using MVA) 
Prefetch ICache line (using MVA) 
Invalidate DCache SBZ 
Invalidate DCache single entry (using MVA) 


Clean DCache single entry (using MVA) 
Clean and Invalidate DCache entry (using MVA) 
Clean DCache single entry (using index) 
Clean and Invalidate DCache entry (using index) 
Drain write buffer (1) SBZ 
Wait for interrupt (2) SBZ 


NOTES: 
1. Will stop execution until the write buffer has drained. 
2. Will stop execution in a LOW power state until an interrupt occurs. 
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The operations which can be carried out upon a single cache line identify the line using the data passed in the MCR 
instruction. The data is interpreted using one of the following formats: 


31 


pMociticd virtuatadaress fo fo fo fo fo] 


Lo 
SBZ 


Figure 2-2. Register 7 MVA Format 


26 25 24 23 22 21 2019 1817161514131211109 8 7 5 43 2 1 


Po Lo 
SBZ SBZ 


Figure 2-3. Register 7 Index Format 


The use of register 7 is discussed in Chapter 4 Caches, Write Buffer and Physical Address TAG (PATAG) RAM. 
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REGISTER 8: TLB OPERATIONS 


Register 8 is a write-only register used to manage the translation lookaside buffers (TLBs), the instruction TLB and 
the data TLB. 


Five TLB operations are defined and the function to be performed is selected by the opcode_2 and CRm fields in the 
MCR instruction used to write CP15 register 8. Writing other opcode_2 or CRm values is unpredictable. Reading from 
CP15 register 8 is unpredictable. 


Table 2-17 on page 2-18 shows instructions that can be used to perform TLB operations using register 8. 


Table 2-17. TLB Operations Register 8 


Invalidate TLB(s) MCR p15,0,Rd,c8,c7,0 
Invalidate | TLB MCR p15,0,Rd,c8,c5,0 
SBZ 


Invalidate D TLB ISBZ Ss MCR p15,0,Rd,c8,06,0 
Invalidate D TLB single entry (using MVA) MVA format MCR p15,0,Rd,c8,c6,1 


NOTE: These functions invalidate all the un-preserved entries in the TLB. 
Invalidate TLB single entry functions invalidate any TLB entry corresponding to the modified virtual address given in 
Rd, regardless of its preserved state. See Register 10: TLB lock down register on page 2-21 


Invalidate | TLB single entry (using MVA) MVA format MCR p15,0,Rd,c8,c5,1 


Figure 2-4 shows the modified virtual address format used for operations on single entry TLB lines using register 8. 


31 109 8 765 43 2 1 0 


Modified virtual address ‘0 | 


Do 
SBZ 


Figure 2-4. Register 8 MVA Format 
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REGISTER 9: CACHE LOCK DOWN REGISTER 


Register 9 is the cache lock down register. The cache lock down register is 0x0 on reset. The cache lock down 
register allows software to control which cache line in the ICache or DCache respectively is loaded for a linefill and to 
prevent lines in the [Cache or DCache from being evicted during a linefill, locking them into the cache. 


There is a register for each of the |Cache and DCache, the value of opcode_2 determines which cache register to 
access: 


opcode_2 = 0x0 causes the DCache register to be accessed 
opcode_2 = 0x1 causes the ICache register to be accessed. 


The Opcode_1 and CRm fields should be zero. 


Reading CP15 register 9 returns the value of the cache lock down register, which is the base pointer for all cache 
segments. 


NOTE 
Only bits [81:26] are returned. Bits [25:0] are unpredictable. 


Writing CP15 register 9 updates the cache lock down register, both the base and the current victim pointer for all 
cache segments. Bits [25:0] should be zero. 


The victim counter specifies the cache line to be used as the victim for the next linefill. This is incremented using 
either a random or round-robin replacement policy, determined by the state of the RR-bit in register 1. The victim 
counter generates values in the range (base to 63). This locks lines with index values in the range (0 to base-1). If 
base = 0, there are no locked lines. 


Writing to CP15 register 9 updates the base pointer and the current victim pointer. The next linefill will use and then 
increment the victim pointer. The victim pointer will continue incrementing on linefills and will wrap around to the base 
pointer. For example, setting the base pointer to 0x3 prevents the victim pointer from selecting entries 0x0 to Ox2, 
locking them into the cache. 


Load a cache line into ICache line 0 and lock it down: 


MCR to CP15 register 9, opcode_2 = 0x1, Victim = Base = 0x0 
MCR | prefetch. Assuming the ICache misses, a linefill will occur to line 0. 
MCR to CP15 register 9, opcode_2 = 0x1, Victim = Base = Ox1 


Further ICache linefills will now occur into lines 1 - 63. 


Load a cache line into DCache line 0 and lock it down: 


MCR to CP15 register 9, opcode_2 = 0x0, Victim = Base = 0x0 

Data load (LDR/LDM). Assuming the DCache misses, a linefill will occur to line 0. 
MCR to CP15 register 9, opcode_2 = 0x0, Victim = Base = Ox1 

Further DCache linefills will now occur into lines 1 - 63. 


NOTE 


Writing CP15 register 9, with the CRm field set to 0b0001, updates the current victim pointer only for the 
specified segment only. Bits [81:26] specify the victim; bits [7:5] specify the segment (for a 16KB cache) 
and all other bits should be zero. This encoding is intended for debug use. It is not necessary and not 
advised, to use this encoding. 
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Figure 2-5 shows the format of bits in register 9 


31 26 25 24 23 22 21 2019 1817161514131211109 8 7 6 5 43 2 1 ~0 


a 
UNP/SBZ 


Figure 2-5. Register 9 


Table 2-18 shows the instructions needed to access the cache lock down register: 


Table 2-18. Accessing the Cache Lock Down Register 9 


Read DCache lock down base MRC p15,0,Rd,c9,c0,0 


Write DCache victim and lockdown base MCR p15,0,Rd,c9,c0,0 
Read ICache lock down base MRC p15,0,Rd,c9,c0,1 
Write ICache victim and lockdown base MCR p15,0,Rd,c9,c0, 1 
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REGISTER 10: TLB LOCK DOWN REGISTER 


Register 10 is the TLB lock down register. The TLB lock down register is 0x0 on reset. There is a TLB lock down 
register for each of the TLBs, the value of opcode_2 determines which TLB register to access: 


opcode_2 = 0x0 causes the D TLB register to be accessed 
opcode_2 = 0x1 causes the | TLB register to be accessed. 


Reading CP15 register 10 returns the value of the TLB lock down counter base register, the current victim number 
and the preserve bit (P bit). Note that bits [19:1] are unpredictable when read. 


Writing CP15 register 10 updates the TLB lock down counter base register, the current victim pointer and the state of 
the preserve bit. Bits [19:1] should be zero when written. 


Table 2-19 shows the instructions needed to access the TLB lock down register. 


Table 2-19. Accessing the TLB Lock Down Register 10 


Read D TLB lock down TLB lock-down MRC p15,0,Rd,c10,c0,0 


Write D TLB lock down TLB lock-down MCR p15,0,Rd,c10,c0,0 
Read | TLB lock down TLB lock-down MRC p15,0,Rd,c10,c0,1 
Write | TLB lock down TLB lock-down MCR p15,0,Rd,c10,c0,1 


Figure 2-6 shows the format of bits in register 10. 


31 26 25 20191817161514131211109 8 765 43 21 0 


| Base] victim Jofofofofofofofofofofojofofofofofofojoje 


bo 
UNP/SBZ 


Figure 2-6. Register 10 


The entries in the TLBs are replaced using a round robin replacement policy. This is implemented using a victim 
counter which counts from entry 0 up to 63 and then wraps back round to the base value and continues counting, 
wrapping around to the base value from 63 each time. 


There are two mechanisms available for ensuring entries are not removed from the TLB: 


Locking an entry down prevents it from being selected for overwriting during a table walk, this is achieved by 
programming the base value to which the victim counter reloads. For example, if the bottom 3 entries (0-2) are to be 
locked down, the base counter should be programmed to 3. 


An entry can also be preserved during an Invalidate All instruction. This is done by ensuring the P bit is set when the 
entry is loaded into the TLB. 
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Load a single entry into | TLB location 0, make it immune to Invalidate All and lock it down: 


MCR to CP15 register 10, opcode_2 = 0x1, Base Value = 0, Current Victim = 0, P = 1 
MCR | prefetch. Assuming an | TLB miss occurs, then entry 0 will be loaded. 
MCR to CP15 register 10, opcode_2 = 0x1, Base Value = 1, Current Victim = 1, P =0 


Load a single entry into D TLB location 0, make it immune to Invalidate All and lock it down: 
MCR to CP15 register 10, opcode_2 = 0x0, Base Value = 0, Current Victim = 0, P = 1 

Data load (LDR/LDM) or store (STR/STM). Assuming a D TLB miss occurs, then entry 0 will be loaded. 
MCR to CP15 register 10, opcode_2 = Ox0, Base Value = 1, Current Victim = 1, P = 0 

REGISTERS 11-12 & 14: RESERVED 


Accessing (reading or writing) any of these registers will cause unpredictable behavior. 


REGISTER 13: PROCESS ID 
Register 13 is the process identifier register. The process identifier register is 0x0 on reset. 


Reading from CP15 register 13 returns the value of the process identifier. Writing CP15 register 13 updates the 
process identifier to the value in bits [31:25]. Bits [24:0] should be zero. 


Register 13 bit assignments are shown in Figure 2-7. 


31 25 24 23 22 21 2019 18 17161514131211109 8 7 6 5 43 2 1 


Le 
SBZ 


Figure 2-7. Register 13 


Register 13 can be accessed using the following instructions: 


MRC p15, 0, Rd, c13, cO, 0 ;read process identifier 
MCR p15, 0, Rd, c13, cO, 0 ;write process identifier 
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Using the process Identifier (ProclID) 


Addresses issued by the ARM9TDMI core in the range 0 to 32MB are translated by CP15 register 13, the ProclD 
register. Address A becomes A + (ProclD x 32MB). It is this translated address that is seen by both the Caches and 
MMU. Addresses above 32MB undergo no translation. This is shown in Figure 2-8 on page 2-23 . 


The ProclD is a seven bit field, enabling 64 x 32MB processes to be mapped. 


NOTE 


If ProclD is zero, as it is on reset, then there is a flat mapping between the ARM9TDMI and the Caches and 
MMU. 


Virtual address (VA) Modified virtual address (MVA) 
issued by ARM9TDMI input to caches and MMU 


Figure 2-8. Address Mapping Using CP15 Register 13 
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Changing the ProclD - performing a fast context switch 


A fast context switch is done by writing to CP15 register 13. The contents of the caches and TLBs do not have to be 
flushed after a fast context switch because they still hold valid address tags. It should be noted that the two 
instructions after the MCR to write the ProclD will have been fetched with the old ProclD: 


{ProclD = 0} 
MOV 10, #1:SHL:25 ; Fetched with ProclD = 0 


MCR p15,0,r0,c13,c0,0 ; Fetched with ProclD = 0 


Al ; Fetched with ProclD = 0 
A2 ; Fetched with ProclD = 0 
A3 ; Fetched with ProclD = 1 


REGISTER 15: TEST CONFIGURATION REGISTER 


Register 15 is used for test purposes. Accessing (reading or writing) this register will cause the ARM920T to have 
unpredictable behavior. 
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Appendix 3 


MMU 


ABOUT THE MMU 


ARM920T implements an enhanced ARM Architecture V4 MMU to provide translation and access permission 
checks for the instruction and data address ports of the ARM9TDMI. The MMU is controlled from a single set of two- 
level page tables stored in main memory, and are enabled by M-Bit in CP15 register 1, providing a single address 
translation and protection scheme. The instruction and data TLBs in the MMU can be independently locked and 
flushed. 


The MMU features are: 


e standard ARM V4 MMU mapping sizes, domains, and access protection scheme 
¢ mapping sizes are 1MB sections, 64KB large pages, 4KB small pages and new 1KB tiny pages 
¢ access permissions for sections 


¢ access permissions for large pages and small pages can be specified separately for each quarter of the page 
(these quarters are called sub-pages) 


e 16 domains implemented in hardware 

e 64 entry instruction TLB and 64 entry data TLB 

e hardware page table walks 

e round-robin replacement algorithm (also called cyclic) 

e invalidate whole TLB via CP15 Register 8 

e invalidate TLB entry, selected by modified virtual address, via CP15 register 8 


e independent lockdown of instruction TLB and data TLB via CP15 register 10. 


ACCESS PERMISSIONS AND DOMAINS 


For large and small pages, access permissions are defined for each sub-page (1KB for small pages, 16KB for large 
pages). Sections and tiny pages have a single set of access permissions. 


All regions of memory have an associated domain. A domain is the primary access control mechanism for a region 
of memory and defines the conditions in which an access can proceed. The domain determines whether: 


the access permissions are used to qualify the access 
the access is unconditionally allowed to proceed 
the access is unconditionally aborted. 


In the latter two cases, the access permission attributes are ignored. 
There are 16 domains, which are configured using the domain access control register. 
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TRANSLATED ENTRIES 


Each TLB caches 64 translated entries. During CPU memory accesses, the TLB provides the protection information 
to the access control logic. 


If the TLB contains a translated entry for the modified virtual address, the access control logic determines whether 
access is permitted: 


e If access is permitted and an off-chip access is required, the MMU outputs the appropriate physical address 
corresponding to the modified virtual address. 
e If access is permitted and an off-chip access is not required, the cache services the access. 


e If access is not permitted, the MMU signals the CPU core to abort. 


If a TLB misses (it does not contain an entry for the virtual address) the translation table walk hardware is invoked to 
retrieve the translation information from a translation table in physical memory. Once retrieved, the translation 
information is written into the TLB, possibly overwriting an existing value. 


The entry to be written is chosen by cycling sequentially through the TLB locations. To enable use of TLB locking 
features, the location to be written can be specified using CP15 register 10, TLB lockdown. 


When the MMU is turned off (as happens on reset), no address mapping occurs and all regions are marked as non- 
cacheable and non-bufferable. See About the caches and write buffer on page 4-1. 
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MMU PROGRAM ACCESSIBLE REGISTERS 


Table 3-1 shows system control coprocessor (CP15) registers which are used, in conjunction with page table 
descriptors stored in memory, to determine the operation of the MMU 


Table 3-1. CP15 Register Functions 


Control register Contains bits to enable the MMU (M bit), enable data 
address alignment checks (A bit) and to control the 
access protection scheme (S bit and R bit). 


Translation table : Holds the physical address of the base of the translation 
base register table maintained in main memory. 
This base address must be on a 16KB boundary and is 
common to both TLBs. 


Domain access : Comprises sixteen 2-bit fields. 
control register Each field defines the access control attributes for one of 
16 domains (D15—D0). 


Fault status register 3 Indicates the cause of a data and prefetch abort and the 
domain number of the aborted access, when an abort 
occurs. 

Bits 7:4 specify which of the 16 domains (D15—D0) was 
being accessed when a fault occurred. 

Bits 3:0 indicate the type of access being attempted. 

The value of all other bits is unpredictable. The encoding of 
these bits is shown in Table 3-4 on page 3-18 . 


Fault address : Holds the virtual address associated with the access that 
register caused the data abort. See Table 3-4 on page 3-18 for 
details of the address stored for each type of fault. 


ARMSTDMI Register 14 can be used to determine the 
virtual address associated with a prefetch abort. 


TLB operations : Writing to this register causes the MMU to perform TLB 

register maintenance operations; either invalidating all the 
(unpreserved) entries in the TLB, or invalidating a specific 
entry. 


TLB lock down 10 (| & D) 31:20 & 0 Allows specific page table entries to be locked into the 

register TLB and the TLB victim index to be read/written: 
opcode 2 = 0x0 accesses the D TLB lock down register 
opcode 2 = 0x1 accesses the | TLB lock down register. 
Locking entries in the TLB guarantees that accesses to 
the locked page or section can proceed without incurring 
the time penalty of a TLB miss. This allows the execution 
latency for time-critical pieces of code such as interrupt 
handlers to be minimized. 
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All the CP15 MMU registers, except register 8, contain state and can be read using MRC instructions and written 
using MCR instructions. Registers 5 and 6 are also written by the MMU during a data abort. Writing to Register 8 
causes the MMU to perform a TLB operation, to manipulate TLB entries. This register cannot be read. The instruction 
TLB (| TLB) and data TLB (D TLB) both have a copy of register 10, the opcode_2 field in the CP15 instruction is used 
to determine which one is accessed. 


The system control coprocessor (CP15) is described in Programmer's Model on page 2-1. Details of register format 
and the coprocessor instructions to access them are given there. 


ADDRESS TRANSLATION 


The MMU translates virtual addresses generated by the CPU core (and by CP15 register 13) into physical addresses 
to access external memory. It also derives and checks the access permission, using a translation lookaside buffer 
(TLB). 


The MMU table walking hardware is used to add entries to the TLB. The translation information, which comprises 
both the address translation data and the access permission data, resides in a translation table located in physical 
memory. The MMU provides the logic needed to traverse this translation table and load entries into the TLB. 


There are up to two stages to the hardware table walking (and hence permission checking) process. The number of 
stages depends on whether the address in question has been marked as a section-mapped access or a page- 
mapped access. There is one size of section and three sizes of page-mapped access (large pages, small pages and 
tiny pages). The translation process always starts out in the same way, with a level one fetch. A section-mapped 
access requires only a level one fetch, but a page-mapped access requires a subsequent level two fetch. 
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Figure 3-1. Translating Page Tables 
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HARDWARE TRANSLATION PROCESS 


TRANSLATION TABLE BASE 


The hardware translation process is initiated when the TLB does not contain a translation for the requested modified 
virtual address. The translation table base (TTB) register points to the base address of a table in physical memory 
which contains section and/or Page descriptors. The 14 low-order bits of the TTB register are set to zero on a read 
and the table must reside on a 16KB boundary. 


31 14 13 0 


Figure 3-2. Translation Table Base Register 


The translation table has up to 4096 x 32-bit entries, each describing 1MB of virtual memory. This allows up to 4GB 
of virtual memory to be addressed. Figure 3-1 on page 3-5 illustrates the table walk process. 
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LEVEL ONE FETCH 


Bits 31:14 of the translation table base register are concatenated with bits 31:20 of the modified virtual address to 
produce a 30-bit address as illustrated in Figure 3-3 on page 3-7. 


This address selects a 4-byte translation table entry which is a level one descriptor for either a section or a page 
table. 


Modified virtual address 
31 20 19 0 


Translation table base 
31 1413 0 


Translation base SS 


12 
18 


31 14 13 


210 
Translation base Table index ‘0 | | 


Level one descriptor 


Figure 3-3. Accessing the Translation Table Level One Descriptors 
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LEVEL ONE DESCRIPTOR 


The level one descriptor returned is either a section descriptor a coarse page table descriptor, or a fine page table 
descriptor. A section descriptor provides the base address of a 1MB block of memory. The page table descriptors 
provide the base address of a page table that contains level two descriptors. 


There are two sizes of page table: 


e coarse page tables have 256 entries, splitting the 1MB the table describes into 4KB blocks 


e fine page tables have 1024 entries, splitting the 1MB the table describes into 1KB blocks 


[coarse ago ation access | | domain [1] [0] coarse pe tie 


[sectonvaseassress [| [ar | | oman [1 Jo]|r[] section 
[___Finepagerabienase acorn | | | oman [1] [+] 1] rine poe tai 


Figure 3-4. Level One Descriptors 


The two least significant bits indicate the descriptor type 


Table 3-2. Interpreting Level One Descriptor Bits [1:0] 


| Value | Meaning | Nes 
| 00—sinvaid Generates a section translation fault. 
Coarse page table __| Indicates that this is a coarse page table descriptor. 


Indicates that this is a section descriptor. 
Fine page table Indicates that this is a fine page table descriptor. 
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SECTION DESCRIPTOR 


Bits 3:2 (C & B) indicate whether the area of memory mapped by this section is treated as write-back cacheable, 
write-through cacheable, non-cached buffered or non-cached non-buffered. 


Bit 4 should be written to 1 for backward compatibility. 


Bits 8:5 specify one of the 16 possible domains (held in the domain access control registers) that contain the 
primary access controls. 


Bit 9 is always written as 0. 
Bits 11:10 (AP) specify the access permissions for this section. 
Bits 19:12 are always written as 0. 


Bits 31:20 form the corresponding bits of the physical address for a section. 


COARSE PAGE TABLE DESCRIPTOR 


Bits 3:2 are always written as 0. 
Bit 4 is always written as 1. 


Bits 8:5 specify one of the 16 possible domains (held in the Domain access control registers) that contain the 
primary access controls. 


Bit 9 is always written as 0. 


Bits 31:10 form the base for referencing the level two descriptor. (The coarse page table index for the entry is derived 
from the modified virtual address.) 


If a coarse page table descriptor is returned from the level one fetch, a level two fetch is initiated. 


FINE PAGE TABLE DESCRIPTOR 


Bits 3:2 are always written as 0. 
Bit 4 is always written as 1. 


Bits 8:5 specify one of the 16 possible domains (held in the domain access control registers) that contain the 
primary access controls. 


Bits 11:9 are always written as 0. 


Bits 31:12 form the base for referencing the level two descriptor. (The fine page table index for the entry is derived 
from the modified virtual address.) 


If a fine page table descriptor is returned from the level one fetch, a level two fetch is initiated. 
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TRANSLATING SECTION REFERENCES 


Figure 3-5 illustrates the complete section translation sequence. Note that access permissions contained in the level 
one descriptor must be checked before the physical address is generated. 


20 19 


Translation table base 
1413 


Transtation base ee 


12 
18 


Translation base Table index ia q 


Section level one descriptor 
20 19 1211109 8 


re 8 oe 


Physical address 
20 19 


Figure 3-5. Section Translation 
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LEVEL TWO DESCRIPTOR 


If the level one fetch returns either a coarse page table descriptor or a fine page table descriptor, this provides the 
base address of the page table to be used. The page table is then accessed and a level two descriptor is returned. 
This defines either a tiny, a small or a large page descriptor: 

e a tiny page descriptor provides the base address of a 1KB block of memory 

¢ asmall page descriptor provides to the base address of a 4KB block of memory 

e alarge page descriptor provides the base address of a 64KB block of memory 


Coarse page tables have 256 entries, each entry describing 4KB. These entries can provide base addresses for 
either small or large pages. Large page descriptors must be repeated in 16 consecutive entries. 


Fine page tables have 1024 entries, each entry describing 1KB. These entries can provide base addresses for either 
tiny, small or large pages. Small page descriptors must be repeated in 4 consecutive entries and large page 
descriptors must be repeated in 64 consecutive entries. 


The figure below shows the format of level one descriptors. 


1615 1211109 876543210 
/o | Fault 


a 
[arse page se aaaress [|] ] 2 [mt [m0 JoJo] of | tase nae 


[~“smnatipage nase adaress_] on | on2 Joni | op0 [oa] so] smatipce 
ee EO 


Figure 3-6. Page Table Entry (Level One Descriptor) 


Bits[1:0] indicate the page size and validity and are interpreted as follows. 


Table 3-3. Interpreting Page Table Entry Bits 1:0 


| Value | Meaning | Nes 
| 00—sinvaid Generates a page translation fault. 


Large page Indicates that this is a 64KB page. 
Small page Indicates that this is a 4KB page. 
Tiny page Indicates that this is a 1KB page. 
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Bit 3:2 (C & B) indicate whether the area of memory mapped by this page is treated as write-back cacheable, write- 
through cacheable, non cached buffered or non-cached non-buffered. 


Domain access control on page 3-19 and Fault checking sequence on page 3-21 show how to interpret the access 
permission (ap) bits. 


NOTE 


Tiny pages do not support sub page permissions and therefore only have one set of access permission bits. 


Bits 31:10 (tiny pages), 31:12 (small pages) or bits 31:16 (large pages) are used to form the corresponding bits of the 
physical address. 


TRANSLATING LARGE PAGE REFERENCES 


Figure 3-7 on page 3-13 illustrates the complete translation sequence for a 64KB large page. 


As the upper four bits of the page index and low-order four bits of the coarse page table index overlap, each coarse 
page table entry for a large page must be duplicated 16 times (in consecutive memory locations) in the coarse page 
table. 


If a large page descriptor is included in a fine page table the upper six bits of the page index and low-order six bits of 
the fine page table index overlap, each fine page table entry for a large page must therefore be duplicated 64 times. 
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Modified virtual address 
20 19 1615 12 11 0 


Translation table base 
1413 


Transtation base TT 


18 


Translation base Table index Tr a 
Level one descriptor 


Parsonage tno ase aaaecs | [oom Toy 


31 10 9 210 
Coarse page table base address L2 table index ‘0 ‘| 


Level two descriptor 
1615 1211109 8 765432 1 


oe 


Physical address 
16 15 


Figure 3-7. Large Page Translation from a Coarse Page Table 
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TRANSLATING SMALL PAGE REFERENCES 


Figure 3-8 illustrates the complete translation sequence for a 4KB small page. If a small page descriptor is included 
in a fine page table, the upper two bits of the page index and low-order two bits of the fine page table index overlap. 
Each fine page table entry for a small page must therefore be duplicated four times. 


Modified virtual address 
20 19 12 11 


Translation table base 
1413 


Transtation base et 


18 


Translation base Table index ag a 
Level one descriptor 


| arson tuno ase naaecs [Loom Toy 


31 10 9 210 
Coarse page table base address L2 table index 10 | 


Level two descriptor 
1211109 8 765432 1 


ee 


Physical address 
12 11 


Figure 3-8. Small Page Translation from a Coarse Page Table 
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TRANSLATING TINY PAGE REFERENCES 


Figure 3-9 on page 3-16 illustrates the complete translation sequence for a 1KB tiny page. Page translation involves 
one additional step beyond that of a section translation: the level one descriptor is the fine page table descriptor and 
this is used to point to the level one descriptor. 


NOTE 


The domain specified in the level one description and access permissions specified in the level one 
description together determine whether the access has permissions to proceed. See section Domain 
access control on page 3-19) for details. 
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Modified virtual address 
20 19 


Table index (2 table index ; 


Translation table base 
14 13 


Transtation base a. 7 


18 


Translation base Table index Tr a 


Level one descriptor 
1211 


a RD 


Fine page table base address L2 table index Tr a 
Level two descriptor 


[rans oT 


Physical address 


31 10 9 0 


Figure 3-9. Tiny Page Translation from a Fine Page Table 
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SUB-PAGES 


Access permissions can be defined for sub pages of small and large pages. If, during a page walk, a small or large 
page has a non-identical sub page permission, only the sub page being accessed is written into the TLB. For 
example, a 16KB (large page) sub page entry will be written into the TLB if the sub page permission differs and a 
64KB entry will be put in the TLB if the sub page permissions are identical. 


When sub page permissions are used and the page entry then needs invalidating, all four sub pages must be 
invalidated separately. 


MMU FAULTS AND CPU ABORTS 


The MMU generates an abort on the following types of faults: 


e alignment faults (data accesses only) 
e translation faults 
e domain faults 


¢ permission faults. 


In addition, an external abort may be raised by the external system as a result of certain types of external data 
access. 


Alignment fault checking is enabled by the A-bit in CP15 register 1. Alignment fault checking is not affected by 
whether or not the MMU is enabled. Translation, domain and permission faults are only generated when the MMU is 
enabled. 


The access control mechanisms of the MMU detect the conditions that produce these faults. If a fault is detected as 
the result of a memory access, the MMU will abort the access and signal the fault condition to the CPU core. The 
MMU retains status and address information about faults generated by the data accesses in the fault status register 
and fault address register (see section Fault address and fault status registers on page 3-18). The MMU does not 
retain status about faults generated by instruction fetches. 


An access violation for a given memory access inhibits any corresponding external access, with an abort returned to 
the CPU core. 
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FAULT ADDRESS AND FAULT STATUS REGISTERS 


On a data abort, the MMU places an encoded 4 bit value, FS[3:0], along with the 4-bit encoded domain number, in 
the Data fault status register (FSR). Similarly, on a prefetch abort, in the Prefetch fault status register, intended for 
debug purposes only. In addition, the modified virtual address associated with the data abort is latched into the fault 
address register (FAR). If an access violation simultaneously generates more than one source of abort, they are 
encoded in the priority given in Table 3-4 . The fault address register is not updated by faults caused by instruction 
prefetches. 


FAULT STATUS 


The remainder of this chapter describes the various access permissions and controls supported by the data MMU 
and details how these are interpreted to generate faults. 


Table 3-4. Priority Encoding of Fault Status 


Highest Alignment Ob00x1 invalid MVA of access 
priority causing abort 
Translation Section Page | 0b0101 invalid MVA of access 
0b0111 valid causing abort 


Domain Section Page | 0b1001 valid MVA of access 
0b1011 valid causing abort 

Permission Section Page | 0b1101 valid MVA of access 
0b1111 valid causing abort 

Lowest priority | External aborton NCNB_ | Section Page | 061000 valid MVA of access 
access or NCB read. 0b1010 valid causing abort 


NOTES: 

1. Data FSR only. 
Alignment faults may write either 060001 or 060011 into FS[3:0]. 
Invalid values in domain[3:0] occur because the fault is raised before a valid domain field has been read from a page 
table descriptor. 
Any abort masked by the priority encoding may be regenerated by fixing the primary abort and restarting the instruction. 
NCNB means Non-Cacheable and Non-Bufferable. 
NCB means Non-Cacheable but Bufferable. 

2. Instruction FSR only. 
The same priority applies as for the Data fault status register, except that alignment faults cannot occur, and external 
aborts apply only to NC (Non-cacheable) reads. 
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DOMAIN ACCESS CONTROL 


MMU accesses are primarily controlled via domains. There are 16 domains and each has a 2-bit field to define 
access to it. Two types of user are supported, clients and managers. See Table 3-5. The domains are defined in the 
domain access control register. Figure 3-10 illustrates how the 32 bits of the register are allocated to define the 16 2- 
bit domains. 


31 30 29 28 27 26 25 24 23 22 21 2019 18 17161514131211109 8 76543 210 


psfutisfetufopstet7fets ts tsteqs fo | 


Figure 3-10. Domain Access Control Register Format 


Table 3-5 defines how the bits within each domain are interpreted to specify the access permissions 


Table 3-5. Interpreting Access Control Bits in Domain Access Control Register 
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Table 3-6 shows how to interpret the access permission (AP) bits and how their interpretation is dependent upon the 
S and R bits (control register bits 8 and 9). 


Table 3-6. Interpreting Access Permission (AP) Bits 
Supervisor User 
Permissions Permissions 
No access No access Any access generates a 
permission fault 


1 Read only Read only Any write generates a 
permission fault 


Po | it | 1 [Recess SO] CdS ‘CC‘“‘C*” 
01 Xx Xx Read/write No access Access allowed only in 
supervisor mode 
10 Xx Xx Read/write Read only Writes in user mode cause 
permission fault 
11 Xx Xx Read/write Read/write All access types permitted in 
both modes. 


SO 
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FAULT CHECKING SEQUENCE 


The sequence by which the MMU checks for access faults is different for sections and pages. The sequence for both 
types of access is shown below. The conditions that generate each of the faults are described on the following 
pages. 


Modified virtual address 


Check address alignment Misaligned bea 
Section 
translation Get level one descriptor 
fault 


Page 
Get page translation 
table entry f 
ault 
Section 
No access(00) ; No access(00) 
eon Reserved(10) Check domain status Reserved(10) 


Client(01) Client(01) 


Manager(11) 
Section Page 
permission Violation ener ones ey iad Violation permission 
permissions permissions 


fault fault 
Physical address 


Figure 3-11. Sequence for Checking Faults 
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ALIGNMENT FAULT 


If alignment fault is enabled (A-Bit in CP15 register 1 set), the MMU will generate an alignment fault on any data word 
access the address of which is not word aligned, or on any halfword access the address of which is not halfword 
aligned, irrespective of whether the MMU is enabled or not. An alignment fault will not be generated on any 
instruction fetch, nor on any byte access. 


NOTE 


If the access generates an alignment fault, the access sequence will abort without reference to further 
permission checks. 


TRANSLATION FAULT 

There are two types of translation fault, section and page: 

Section A section translation fault is generated if the level one descriptor is marked as invalid. 
This happens if bits[1:0] of the descriptor are both 0. 


Page A page translation fault is generated if the level one descriptor is marked as invalid. This 
happens if bits[1:0] of the descriptor are both 0. 


DOMAIN FAULT 


There are two types of domain fault, section and page. In both cases the level one descriptor holds the 4-bit domain 
field which selects one of the 16 2-bit domains in the domain access control register. The two bits of the specified 
domain are then checked for access permissions as detailed in Table 3-6 on page 3-20. In the case of a section, the 
domain is checked once the level one descriptor is returned and in the case of a page, the domain is checked once 
the level one descriptor is returned. 


If the specified access is either no access (00) or reserved (10) then either a section domain fault or page domain 
fault occurs. 
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PERMISSION FAULT 


MMU 


If the 2-bit domain field returns 01 (client) then access permissions are checked as follows: 


Section 


Large page, small page 


Tiny page 


ELECTRONICS 


If the level one descriptor defines a section-mapped access, the AP bits of the 
descriptor define whether or not the access is allowed according to Table 3-6 on 
page 3-20. 

Their interpretation is dependent upon the setting of the S and R bits (control 
register bits 8 and 9). If the access is not allowed, a section permission fault is 
generated. 


If the level one descriptor defines a page-mapped access and the level two 
descriptor is for a large or small page, four access permission fields (ap3-ap0) 
are specified, each corresponding to one quarter of the page. Hence, for small 
pages ap3 is selected by the top 1KB of the page and ap0 is selected by the 
bottom 1KB of the page. For large pages, ap3 is selected by the top 16KB of the 
page and ap0 is selected by the bottom 16KB of the page. 

The selected AP bits are then interpreted in exactly the same way as for a 
section (see Table 3-6 on page 3-20), the only difference being the fault 
generated is a page permission fault. 


If the level one descriptor defines a page-mapped access and the level two 
descriptor is for a tiny page, the AP bits of the level one descriptor define 
whether or not the access is allowed in the same way as for a section. The fault 
generated is a page permission fault. 
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EXTERNAL ABORTS 


In addition to the MMU-generated aborts the ARM920T can be externally aborted by the AMBA bus, which may be 
used to flag an error on an external memory access. However, not all accesses can be aborted in this way and the 
Bus Interface Unit (BIU) ignores external aborts that can not be handled. 


The following accesses may be aborted: 

non-cached reads 

unbuffered writes 

read-lock-write sequence, to non-cacheable memory. 


In the case of a read-lock-write (SWP) sequence in which the read aborts, the write will always be attempted. 
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INTERACTION OF THE MMU AND CACHES 


The MMU is enabled and disabled using bit 0 of the CP15 control register. 


ENABLING THE MMU 
To enable the MMU: 


1) Program the translation table base and domain access control registers. 
2) Program level 1 and level 2 page tables as required. 
3) Enable the MMU by setting bit 0 in the control register. 


Care must be taken if the translated address differs from the untranslated address as several instructions following 
the enabling of the MMU may have been prefetched with the MMU off (using physical = virtual address - flat 
translation) and enabling the MMU may be considered as a branch with delayed execution. A similar situation 
occurs when the MMU is disabled. Consider the following code sequence: 


MRC p15, 0, R1, c1, CO, 0: Read control rejection 
ORR R1, #0x1 

MCR p15,0,R1,C1, CO,0 ; Enable MMUS 

Fetch Flat 

Fetch Flat 


Fetch Translated 


The instruction and data caches can be enabled simultaneously with the MMU using a single MCR instruction. 


DISABLING THE MMU 


To disable the MMU, clear bit 0 in the control register. The data cache should be disabled prior to, or, at the same 
time as the MMU is disabled by clearing Bit 2 of the control register. See the paragraph in Enabling the MMU 
regarding prefetch effects. 


NOTE 


If the MMU is enabled, then disabled and subsequently re-enabled the contents of the TLBs will have been 
preserved. If these are now invalid, the TLBs should be invalidated before the MMU is re-enabled. See 
Register 8: TLB operations on page 2-18. 
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NOTES 
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Appendix 4 


CACHES, WRITE BUFFER 


ABOUT THE CACHES AND WRITE BUFFER 


The ARM920T includes an instruction cache, a data cache, a write buffer and a Physical Address TAG RAM to 
reduce the effect of main memory bandwidth and latency on performance. 


The ARM920T implements separate 16KB instruction and 16KB data caches. 

The caches have the following features: 

Virtually-addressed 64-way associative cache. 

8 words per line (32 bytes per line) with one valid bit and two dirty bits per line, allowing half-line write-backs. 


Write-through and write-back cache operation (write-back caches are also known as copy back caches), 
selected per memory region by the C and B bits in the MMU translation tables (for data cache only). 


Pseudo-random or round-robin replacement, selectable via RR bit in CP15 register 1. 
Low-power CAM-RAM implementation. 
Caches independently lockable with granularity of 1/64th of cache, which is 64 words (256 bytes). 


For compatibility with Microsoft WindowsCE, and to reduce interrupt latency, the physical address 
corresponding to each data cache entry is stored in the physical address TAG RAM for use during cache line 
write-backs, in addition to the virtual address TAG stored in the cache CAMs. This means that the MMU is not 
involved in cache write-back operations, removing the possibility of TLB misses related to the write-back 
address. 


Cache maintenance operations to provide efficient cleaning of the entire data cache, and to provide efficient 
cleaning and invalidation of small regions of virtual memory. The latter allows ICache coherency to be efficiently 
maintained when small code changes occur, for example self-modifying code and changes to exception vectors. 


The write buffer can hold 16 words of data and four addresses. 
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INSTRUCTION CACHE 


The ARM920T includes a 16KB instruction cache. The ICache has 512 lines of 32 bytes (8 words), arranged as a 64- 
way set-associative cache and uses modified virtual addresses, translated by CP15 register 13 (see Address 
translation on page 3-4), from the ARM9TDMI core. 


The ICache implements allocate-on-read-miss. Random or round-robin replacement can be selected under software 
control via the RR bit (CP15 register 1, bit 14). Random replacement is selected at reset. 


Instructions can also be locked in the ICache such that they cannot be overwritten by a linefill. This operates with a 
granularity of 1/64th of the cache, which is 64 words (256 bytes). 


All instruction accesses are subject to MMU permission and translation checks. Instruction fetches which are 
aborted by the MMU will not cause linefills or instruction fetches to appear on the ASB. 


For clarity, the | bit (bit 12 in CP15 register 1) is referred to as the Icr bit throughout the following text. The C bit from 
the MMU translation table descriptor corresponding to the address being accessed is referred to as Ctt. 
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INSTRUCTION CACHE ENABLE/DISABLE 
On reset, the ICache entries are all invalidated and the ICache is disabled. 
The ICache is enabled by writing 1 to the Icr bit, and disabled by writing 0 to the Icr bit. 


The ICache is usually used with the MMU enabled, in which case the C bit in the relevant MMU translation table 
descriptor indicates whether an area of memory is cacheable. If the ICache is enabled with the MMU disabled, all 
instruction fetches are treated as cacheable. 


When the ICache is disabled, the cache contents are ignored and all instruction fetches appear on the ASB as 
separate non-sequential accesses. 


NOTE 


ARM920T implements a non-sequential access on the ASB as an A-TRAN cycle followed by an S-TRAN 
cycle. It does not produce N-TRAN cycles. 


If the cache is subsequently re-enabled its contents will be unchanged. If the contents are no longer coherent with 
main memory the ICache should be invalidated prior to being enabled (see Register 7: Cache operations on 
page 2-15). 


The MMU and ICache can be enabled simultaneously by writing a 1 to bit O and to bit 12 in CP15 register 1 with a 
single MCR instruction. 


INSTRUCTION CACHE OPERATION 


If the [Cache is disabled, each instruction fetch results in a separate non-sequential memory access on the ASB, 
giving very low performance to burst memory such as page mode DRAM or synchronous DRAM. Therefore, the 
ICache should be enabled as soon as possible after reset. 


If the ICache is enabled, an ICache lookup is performed for each instruction fetch regardless of the setting of the Ctt 
bit in the relevant MMU translation table descriptor. If the required instruction is found in the cache, the lookup is 
called a cache hit. If the required instruction is not found in the cache, the lookup is called a cache miss. 


If the instruction fetch is a cache hit and Ctt = 1 indicating a cacheable region of memory, then the instruction is 
returned from the cache to the ARM9TDMI CPU core. If it is a cache miss and Ctt = 1, then an 8-word linefill will be 
performed, possibly replacing another entry. The entry to be replaced, (called the victim), is chosen from the entries 
which are not locked using either a random or round-robin replacement policy. 


If Ctt = 0, indicating a non-cacheable region of memory, then a single non-sequential memory access will appear on 
the ASB. 


NOTE 


If Ctt=0, indicating a non-cacheable region of memory, then the cache lookup should result in a cache miss. 
The only way that it can result in a cache hit is if software has changed the value of the Ctt bit in the MMU 
translation table descriptor without invalidating the cache contents. This is a programming error, as the 
behavior in this case is architecturally unpredictable and varies between implementations. 
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INSTRUCTION CACHE REPLACEMENT ALGORITHM 


The ICache and DCache replacement algorithm is selected by the RR bit in the CP15 control register (CP15 register 
1, bit 14). Random replacement is selected at reset. Setting the RR bit to 1 selects round-robin replacement. 


INSTRUCTION CACHE LOCKDOWN 


Instructions can be locked into the ICache, causing the ICache to guarantee a hit, and providing optimum and 
predictable execution time. 


Instructions are locked into the ICache by first ensuring the code to be locked is not already in the cache. This is 
tested by flushing either the whole ICache or specific lines. A short software routine can then be used to load the 
instructions into the I[Cache. The software routine must either be non-cacheable, or already in the ICache, but not in 
an ICache line which is about to be overwritten. The instructions to be loaded must be from a memory region which is 
cacheable. 


The software routine operates by writing to CP15 register 9 to force the replacement counter to a specific |Cache line 
and by using the prefetch ICache line operation available via CP15 register 7 to force the ICache to perform a lookup. 
This will miss and a linefill will be performed loading the cache line into the entry specified by the replacement 
counter. Once all the instructions have been loaded, they are then locked by writing to CP15 register 9 to set the 
replacement counter base to be one higher than the number of locked cache lines. 


See Data cache lockdown on page 4-9 for a more complete explanation of cache locking. 
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DATA CACHE AND WRITE BUFFER 


The ARM920T includes a 16KB data cache and a write buffer to reduce the effect of main memory bandwidth and 
latency on data access performance. The DCache has 512 lines of 32 bytes (8-words), arranged as a 64-way set- 
associative cache and uses virtual addresses from the ARM9TDMI CPU core. The write buffer can hold up to 16 
words of data and 4 separate addresses. The operation of the data cache and write buffer are intimately connected. 


The DCache supports write-through (WT) and writeback (WB) memory regions, controlled by the C and B bits in 
each section and page descriptor within the MMU translation tables. For clarity, these bits are referred to as Ctt and 
Bit in the following text. For details see Data cache and write buffer operation on page 4-6. 


Each DCache line has two dirty bits, one for the first 4-words of the line, the other for the last 4-words, and a single 
virtual TAG address and valid bit for the entire 8-word line. The physical address from which each line was loaded is 
stored in the PA TAG RAM and is used when writing modified lines back to memory. 


A linefill always loads a complete 8-word line. 


When a store hits in the DCache, if the memory region is WB, the associated dirty bit is set marking the appropriate 
half-line as being modified. If the cache line is replaced due to a linefill, or if the line is the target of a DCache clean 
operation, the dirty bits are used to decide whether the whole, half, or none of the line is written back to memory. The 
line is written back to the same physical address from which it was loaded, regardless of any changes to the MMU 
translation tables. 


The DCache implements allocate-on-read-miss. Random or round-robin replacement can be selected under software 
control via the RR bit (CP15 register 1, bit 14). Random replacement is selected at reset. 


Data can also be locked in the DCache such that it cannot be overwritten by a linefill. This operates with a granularity 
of 1/64th of the cache, which is 64 words (256 bytes). 


All data accesses are subject to MMU permission and translation checks. Data accesses which are aborted by the 
MMU will not cause linefills or data accesses to appear on the ASB. 


For clarity, the C bit (bit 2 in CP15 register 1) is referred to as the Cer bit throughout the following text. 
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DATA CACHE AND WRITE BUFFER ENABLE/DISABLE 
On reset, all DCache entries are invalidated, the DCache is disabled, and the write buffer contents are discarded. 


There is no explicit write buffer enable bit implemented in ARM920T. Situations in which the write buffer is used are 
described below. 


The DCache is enabled by writing 1 to the Ccr bit, and disabled by writing 0 to the Ccr bit. 


The DCache must be enabled only when the MMU is enabled. This is because the MMU translation tables define the 
cache and write buffer configuration for each memory region. 


When the DCache is disabled the cache contents are ignored and all data accesses appear on the Advanced 
System Bus as separate non-sequential accesses. If the cache is subsequently re-enabled its contents will be 
unchanged. Depending on the software system design, the cache may need to be cleaned after it is disabled, and 
invalidated before it is re-enabled. See Cache coherence on page 4-10. 


The MMU and DCache can be enabled or disabled simultaneously with a single MCR which changes bit 0 and bit 2 
in the control register (CP15 register 1). 


DATA CACHE AND WRITE BUFFER OPERATION 


The DCache and write buffer configuration of each memory region is controlled by the C and B bits in each section 
and page descriptor in the MMU translation tables. For clarity, these bits are referred to as Ctt and Bit in the 
following text. The configuration is modified by the DCache enable bit in the CP15 control register, which is referred 
to as Ccr. 


If the DCache is enabled, a DCache lookup is performed for each data access initiated by the ARM9TDMI CPU core, 
regardless of the value of the Cit bit in the relevant MMU translation table descriptor. If the accessed virtual address 
matches the virtual address of an entry in the cache, the lookup is called a cache hit. If the required address does 
not match any entry in the cache, the lookup is called a cache miss. In this context a data access means any type 
of load (read) or store (write) or swap instruction, including LDR, LDRB, LDRH, LDM, LDC, STR, STRB, STRH, STC, 
SWP and SWPB. 


To ensure that accesses appear on the ASB in program order, ARM92O0T will wait for all writes in the write buffer to 
complete on the ASB before starting any other ASB access. The ARM9TDMI CPU core can continue executing at 
full speed reading instructions and data from the caches and writing to the DCache and write buffer while buffered 
writes are being written to memory via the ASB. 


Table 4-1 describes the DCache and write buffer behavior for each type of memory configuration. Ctt AND Ccr means 
the bitwise Boolean AND of Ctt with Ccr. 
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Table 4-1. Data Cache and Write Buffer Configuration 


Ctt and Ccr | Bt Data cache, write buffer and memory access behavior 


Non-cached, non-buffered (NCNB) 

Reads and writes are not cached and always perform accesses on the ASB and 
may be externally aborted. 

Writes are not buffered. The CPU halts until the write is completed on the ASB. 
Cache hits should never occur. (2) 


Non-cached buffered (NCB) 

Reads and writes are not cached, and always perform accesses on the ASB. 
Cache hits should never occur. 

Writes are placed in the write buffer and will appear on the ASB. The CPU 
continues execution as soon as the write is placed in the write buffer. 

Reads may be externally aborted. 

Writes can not be externally aborted. 


Cached, write-through mode (WT) 

Reads which hit in the cache will read the data from the cache and do not 
perform an access on the ASB. 

Reads which miss in the cache cause a linefill. 

All writes are placed in the write buffer and will appear on the ASB. The CPU 
continues execution as soon as the write is placed in the write buffer. 

Writes which hit in the cache update the cache. 

Writes cannot be externally aborted. 


Cached, write-back mode (WB) 

Reads which hit in the cache will read the data from the cache and do not 
perform an ASB access. 

Reads which miss in the cache cause a linefill. 

Writes which miss in the cache are placed in the write buffer and will appear on 
the ASB. The CPU continues execution as soon as the write is placed in the 
write buffer. 

Writes which hit in the cache update the cache and mark the appropriate half of 
the cache line as dirty, and do not cause an ASB access. 

Cache write-backs are buffered. 

Writes (Cache write-misses and cache write-backs) cannot be externally 
aborted. 


NOTES: 

1. Thecontrol register C bit (Ccr) being zero disables all lookups in the cache, while the translation table descriptor C bit 
(Ctt) being zero only stops new data being loaded into the cache. With Ccr = 1 and Ctt = 0 the cache will still be 
searched 
on every access to check whether the cache contains an entry for the data. 

2. Itis an operating system software error if a cache hit occurs when reading from, or writing to, a region of memory 
marked as NCNB or NCB. The only way this can occur is if the operating system changes the value of the C and B bits 
in a page table descriptor, while the cache contains data from the area of virtual memory controlled by that descriptor. 
The cache and memory system behavior resulting from changing the page table descriptor in this way is unpredictable. 
If the operating system needs to change the C and B bits of a page table descriptor, it must ensure that the caches do 
not contain any data controlled by that descriptor. In some circumstances, the operating system may need to clean and 
flush the caches to ensure this. 
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A linefill performs an 8-word burst read from the ASB and places it as a new entry in the cache, possible replacing 
another line at the same location within the cache. The location which is replaced (called the victim) is chosen from 
the entries which are not locked using either a random or round-robin replacement policy. If the cache line being 
replaced is marked as dirty, indicating that it has been modified and that main memory has not been updated to 
reflect the change, a cache writeback occurs. 


Depending on whether one or both halves of the cache line are dirty, the writeback will perform a 4 or 8-word 
sequential burst write access on the ASB. The writeback data is placed in the write buffer and then the linefill data is 
read from the ASB. The CPU can the continue while the writeback data is written to memory via the ASB. 


Load multiple (LDM) instructions accessing NCNB or NCB regions perform sequential bursts on the ASB. Store 
multiple (STM) instructions accessing NCNB regions also perform sequential bursts on the ASB. 


The sequential burst will be split into two bursts if it crosses a 1KB boundary. This is because the smallest MMU 
protection and mapping size is 1KB, so the memory regions on each size of the 1KB boundary may have different 
properties. 


This means that no sequential access generated by ARM920T will cross a 1KB boundary, which can be exploited to 
simplify memory interface design. For example, a simple page mode DRAM controller could perform a page-mode 
access for each sequential access, provided the DRAM page size is 1KB or larger. 


See also Cache coherence on page 4-10. 


DATA CACHE REPLACEMENT ALGORITHM 


The DCache and ICache replacement algorithm is selected by the RR bit in the CP15 Control register (CP15 register 
1, bit 14). Random replacement is selected at reset. Setting the RR bit to 1 selects round-robin replacement. 


SWAP INSTRUCTIONS 


Swap instruction (SWP or SWPB) behavior is dependent on whether the memory region is cacheable or non- 
cacheable. 


Swap instructions to cacheable regions of memory are useful for implementing semaphores or other synchronization 
primitives in multithreaded uniprocessor software systems. 


Swap instructions to non-cacheable memory regions are useful for synchronization between two bus masters in a 
multi-master bus system. This could be two processors, or a processor and a DMA controller. 


When a swap instruction accesses a cacheable region of memory (WT or WB), the DCache and write buffer behavior 
will be the same as having a load followed by a store according to the normal rules described. The BLOK pin will not 

be asserted during the execution of the instruction. It is guaranteed that no interrupt can occur between the load and 

store portions of the swap. 


When a swap instruction accesses a non-cacheable (NCB or NCNB) region of memory, the write buffer is drained, 
and a single word or byte will be read from the ASB. The write portion of the swap will then be treated as non- 
bufferable, regardless of the value of Btt, and the processor stalled until the write is completed on the ASB. The 
BLOK pin will be asserted to indicate that the read and write should be treated as an atomic operation on the bus. 


Like all other data accesses, a swap to a non-cacheable region which hits in the cache indicates a programming 
error. 
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DATA CACHE ORGANIZATION 


The DCache is organized as 8 segments, each containing 64 lines, and each line containing 8-words. The line's 
position within its segment is a number from 0 to 63 which is called the index. A line in the cache can be uniquely 
identified by its segment and index. The index is independent of the line's virtual address. The segment is selected 
by bits [7:5] of the virtual address of the line. 


Bits [4:2] of the virtual address specify which word within a cache line is accessed. For halfword operations, bit [1] of 
the virtual address specifies which halfword is accessed within the word. For byte operations, bits [1:0] specify which 
byte within the word is accessed. 


Bits [81:8] of the virtual address of the each cache line is called the TAG. The virtual address TAG is stored in the 
cache along with the 8-words of data, when the line is loaded by a linefill. 


Cache lookups compare bits [31:8] of the modified virtual address of the access with the stored TAG to determine 
whether the access is a hit or miss. The cache is therefore said to be virtually addressed. 


DATA CACHE LOCKDOWN 


Data can be locked into the DCache causing the DCache to guarantee a hit, and providing optimum and predictable 
execution time. 


When no data is locked in the DCache, and a linefill occurs, the replacement algorithm chooses a victim cache line 
to be replaced by selecting an index in the range (0 to 63). The segment is specified by bits [7:5] of the virtual 
address of the data access which missed. 


Data is locked into the DCache by restricting the range of victim numbers produced by the replacement algorithm, so 
that some cache lines are never selected as victims. The base pointer for the DCache victim generator can be set by 
writing to CP15 register 9. The replacement algorithm chooses a victim cache line in the range (base to 63), locking 
in the cache the lines with index in the range (0 to base - 1). 


Data is loaded and locked into the DCache by first ensuring the data to be locked is not already in the cache. This 
can be ensured by cleaning and flushing either the whole DCache or specific lines. A short software routine can then 
be used to load the data into the DCache. 


The software routine to load the data operates by writing to CP15 register 9 to force the replacement counter to a 
specific DCache line and then executing a load instruction to perform a cache lookup. This will miss and a linefill will 
be performed, bringing 8 words of data into the cache line specified by the replacement counter, in the segment 
specified by bits [7:5] of the modified virtual address accessed by the load. 


To load further lines into the cache, the software routine can loop performing one load from each line to be loaded. As 
each line contains 8 words, each loop should add 32 (bytes) to the load address. The software routine needs to move 
the victim counter to the next index after it has loaded a line into the last available segment with the current index. 
As there are 8-segments, this will occur after 8-cache lines have been loaded. 


Once all the data has been loaded, it is locked by writing to CP15 register 9 to move the replacement counter base 
to be one higher than the highest index of the locked cache lines. 


The software routine that loads and locks the data in the DCache can be located in a cacheable region of memory 
providing it does not contain any loads or stores other than the loads which are used to bring the data to be locked 
into the DCache. The data to be loaded must be from a memory region which is cacheable. 
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CACHE COHERENCE 


The ICache and DCache contain copies of information normally held in main memory. If these copies of memory 
information get out of step with each other because one is updated and the others are not updated, they are said to 
have become incoherent. If the DCache contains a line which has been modified by a store or swap instruction, and 
the main memory has not been updated, the cache line is said to be dirty. Clean operations force the cache to write 
dirty lines back to main memory. 


On the ARM920T, software is responsible for maintaining coherence between main memory, the ICache and the 
DCache. 


Register 7: Cache operations on page 2-15 describes facilities for invalidating the entire Cache or individual |Cache 
lines, and for cleaning or invalidating DCache lines, or for invalidating the entire DCache. 


To clean the entire DCache efficiently, software should loop though each cache entry using the clean D single entry 
(using index) operation or the clean and invalidate D entry (using index) operation. This should be performed by a 
two-level nested loop going though each index value for each segment. See Data cache organization on page 4-9. 


DCache, ICache, and memory coherence is generally achieved by: 

e cleaning the DCache to ensure memory is up to date with all changes 

e invalidating the ICache to ensure that the I|Cache is forced to re-load instructions from memory. 
Software can minimize the performance penalties of cleaning and invalidating caches by: 


e Cleaning only small portions of the cache when only a small area of memory needs to be made coherent, for 
example, when updating an exception vector entry. 


e Invalidating only small portions of the [Cache when only a small number of instructions are modified, for example, 
when updating an exception vector entry. 


e Not invalidating the ICache in situations where it is known that the modified area of memory cannot be in the 
cache, for example, when mapping a new page into the currently running process. 


The ICache needs to be made coherent with a changed area of memory after any changes to the instructions which 
appear at a virtual address, and before the new instructions are executed. 


Dirty data in the DCache can be pushed out to main memory by cleaning the cache. 
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Situations which necessitate cache cleaning and invalidating include: 


e writing instructions to a cacheable area of memory using STR or STM instructions, for example: 
— self-modifying code 
— JIT compilation 
— copying code from another location 
— downloading code via the EmbeddedICE JTAG debug features 
— updating an exception vector entry. 
e another bus master, such as a DMA controller, modifying a cacheable area main memory 
e turning the MMU on or off 
e changing the virtual-to-physical mappings in the MMU page tables 
e turning the ICache or DCache on, if its contents are no longer coherent. 


The DCache should be cleaned, and both caches invalidated, before the cache and write buffer configuration of an 
area of memory is changed by modifying Ctt or Btt in the MMU translation table descriptor. This is not necessary if it 
is known that the caches cannot contain any entries from the area of memory whose translation table descriptor is 
being modified. 


Changing the process ID in CP15 register 13 does not change the contents of the cache or memory, and does not 
affect the mapping between cache entries and physical memory locations. It only changes the mapping between 
ARM9TDMI addresses and cache entries. This means that changing the process ID does not lead to any coherency 
issues. No cache cleaning or cache invalidation is required when the process ID is changed. 


At reset the DCache and ICache entries are all invalidated and the DCache and |Cache are disabled. 


The software design also needs to consider that the pipelined design of the ARM9TDMI core means that it fetches 
three instructions ahead of the current execution point. So, for example, the three instructions following an MCR 
which invalidates the ICache, will have been read from the ICache before it is invalidated. 
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CACHE CLEANING WHEN LOCKDOWN IS IN USE 


The clean D single entry (using index) and clean and invalidate D entry (using index) operations can leave the victim 
pointer set to the index value used by the operation. In some circumstances, if DCache locking is in use, this could 
leave the victim pointer in the locked region, leading to locked data being evicted from the cache. The victim pointer 
can be moved outside the locked region by implementing the cache loop enclosed by the reading and writing of the 
Base and Victim pointer: 


MRC p15, 0, Rd, c9, cO, 0 ; Read D Cache Base into Rd 


Index Clean or Index Clean and Invalidate loops 


MCR p15, 0, Rd, c9, cO, 0 ; Write D Cache Base and Victim from Rd 


Clean D single entry (using VA) and clean and invalidate D entry (using VA) operations do not move the victim 
pointer, so there is no need to reposition the victim pointer after using these operations. 


IMPLEMENTATION NOTES 


This section describes the behavior of the ARM920T implementation in areas which are architecturally unpredictable. 
For portability to other ARM implementations, software should not depend on this behavior. 


A read from a non-cacheable (NCB or NCNB) region which unexpectedly hits in the cache will still read the required 
data from the ASB. The contents of the cache will be ignored, and the cache contents will not be modified. This 
includes the read portion of a swap (SWP or SWPB) instruction. 


A write to a non-cacheable (NCB or NCNB) region which unexpectedly hits in the cache will update the cache and 
will still cause an access on the ASB. 


PHYSICAL ADDRESS TAG RAM 


The ARM920T implements a PA TAG RAM in order to perform write backs from the data cache. 


A write back occurs when dirty data that is about to be overwritten by linefill data comes from a memory region that 
is marked as a write back region. This data is written back to main memory to maintain memory coherency. 


Dirty data is data that has been modified in the cache, but not updated in main memory. 


When a line is written into the data cache, the physical address TAG (DPA[31:5]) is written into the PA TAG RAM. If 
this line comes to be written back to main memory, the PA TAG RAM is indexed into by the data cache and the 
physical address (WBPA[31:0]) is returned to the AMBA Bus interface so that it can perform the write back. 


The PA TAG RAM Array for a 16k data cache comprises 8 segments x 64 rows/segment x 26 bits/row. There are 
two test interfaces to the PA TAG RAM: 


Debug interface, see Scan chain 4 - debug access to the PA TAG RAM 


AMBA test interface, see PA TAG RAM test 
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Appendix 5 


CLOCK MODES 


OVERVIEW 


The ARM920T has two functional clock inputs, BCLK and FCLK. Internally, the ARM920T is clocked by GCLK, 
which can be seen on the CPCLK output as shown in Figure 5-1. GCLK can be sourced from either BCLK or FCLK 
depending on the clocking mode, selected using nF bit and iA bit in CP15 register 1 (see Register 1: Control register 
on page 2-10). The three clocking modes are FastBus, synchronous and asynchronous. 


The ARM920T is a static design and both clocks can be stopped indefinitely without loss of state. From Figure 5-1 
it can be seen that some of the ARM920T macrocell signals will have timing specified with relation to GCLK, which 
can be either FCLK or BCLK depending on the clocking mode 


CPCLK ARM920T I/O 


AMBA 


bus Rest of ARM920T 
interface 


Figure 5-1. ARM920T Clocking 
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FASTBUS MODE 


In this mode of operation the BCLK input is the source for GCLK. The FCLK input is ignored. This mode is typically 
used in systems with high speed memory. 


SYNCHRONOUS MODE 


This mode is typically used in systems with low speed memory. In this mode GCLK can be sourced from BCLK and 
FCLK. BCLK is used to control the AMBA memory interface. FCLK is used to control the internal ARM9TDMI 
processor core and any cache operations. FCLK must have a higher frequency and must also be an integer multiple 
of BCLK, with a BCLK transition only when FCLK is HIGH. An example is shown in Figure 5-2. 


Figure 5-2. Synchronous Clocking Mode 


If the ARM920T performs an external access, for example, a cache linefill, the ARM920T will switch to BCLK to 
perform the access. The delay when switching from FCLK to BCLK is a minimum of one FCLK phase and a 
maximum of one BCLK cycle. An example of the clock switching is shown in Figure 5-3 . The delay when switching 
from BCLK to FCLK is a maximum of one FCLK phase. 


Figure 5-3. Switching from FCLK to BCLK in Synchronous Mode 


Care must be taken if BCLK is stopped by the system so that when BCLK is restarted it does not violate any of the 
above restrictions. 
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ASYNCHRONOUS MODE 


This mode is typically used in systems with low speed memory. In this mode of operation GCLK can be sourced 
from BCLK and FCLK. BCLK is used to control the AMBA memory interface. FCLK is used to control the internal 
ARM9TDMI processor core and any cache operations. The one restriction is that FCLK must have a higher frequency 
than BCLK. An example is shown in Figure 5-4. 


Figure 5-4. Asynchronous Clocking Mode 


If the ARM920T performs an external access, for example, a cache miss or a cache line fill, ARM920T will switch to 
BCLK to perform the access. The delay when switching from FCLK and BCLK is a minimum of one BCLK cycle, and 
a maximum of one and a half BCLK cycles. An example of the clock switching is shown in Figure 5-4. When 
switching from BCLK to FCLK the minimum delay is one FCLK cycle and the maximum delay is one and a half 
FCLK cycles. An example of the clock switching is shown in Figure 5-5. 


Figure 5-5. Switching from FCLK to BCLK in Asynchronous Mode 
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NOTES 
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S3C SERIES MASK ROM ORDER FORM 


Product description: 


Device Number: S3C - (write down the ROM code number) 
Product Order Form: [| Package [| Pellet [| Wafer Package Type: 


Package Marking (Check One): 


[_] Standard [] Custom A [] Custom B 


(Max 10 chars) (Max 10 chars each line) 


SEC @ YWW @ YWW @ YWW 
Device Name Device Name 


es ee 


@ : Assembly site code, Y : Last number of assembly year, WW : Week of assembly 
Delivery Dates and Quantities: 


Not applicable See ROM Selection Form 


Risk order 


ee ee 


Please answer the following questions: 


“For what kind of product will you be using this order? 


[al New product [| Upgrade of an existing product 


Eel Replacement of an existing product [| Other 


If you are replacing an existing product, please indicate the former product name 


( ) 


‘what are the main reasons you decided to use a Samsung microcontroller in your product? 
Please check all that apply. 
L Price [| Product quality [| Features and functions 


al Development system [| Technical support [| Delivery on time 
[ Used same micom before ia Quality of documentation [ Samsung reputation 


Mask Charge (US$ / Won): 


Customer Information: 


Company Name: Telephone number 


Signatures: 


(Person placing the order) (Technical Manager) 


(For duplicate copies of this form, and for additional ordering information, please contact your local 
Samsung sales representative. Samsung sales offices are listed on the back cover of this book.) 


S3C SERIES 
REQUEST FOR PRODUCTION AT CUSTOMER RISK 


Customer Information: 


Company Name: 


Department: 


Telephone Number: Fax: 


Date: 


Risk Order Information: 


Device Number: S3C - (write down the ROM code number) 


Package: Number of Pins: Package Type: 


Intended Application: 


Product Model Number: 


Customer Risk Order Agreement: 


We hereby request SEC to produce the above named product in the quantity stated below. We believe our risk order 
product to be in full compliance with all SEC production specifications and, to this extent, agree to assume 
responsibility for any and all production risks involved. 


Order Quantity and Delivery Schedule: 


Risk Order Quantity: PCS 


Delivery Schedule: 


Signatures: 


(Person Placing the Risk Order) (SEC Sales Representative) 


(For duplicate copies of this form, and for additional ordering information, please contact your local 
Samsung sales representative. Samsung sales offices are listed on the back cover of this book.) 


S3C2410A MASK OPTION SELECTION FORM 


Device Number: $3C2410A - (write down the ROM code number) 
Attachment (Check one): [ Diskette L PROM 


Customer Checksum: 


Company Name: 


Signature (Engineer): 


Please answer the following questions: 


er Application (Product Model ID: ) 


[| Audio [ | Video [] Telecom 


L LCD Databank [] Caller ID (|) sep 
Game 


[| Industrials [ | Home Appliance [] 


Office Automation 


[| Remocon [| Other 


Please describe in detail its application 


(For duplicate copies of this form, and for additional ordering information, please contact your local 


Samsung sales representative. Samsung sales offices are listed on the back cover of this book.) 


